Source: https://zehntkeller.de/en/datenschutz/
Timestamp: 2020-01-27 11:56:24
Document Index: 105365662

Matched Legal Cases: ['§ 1', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 1', 'Art. 6', 'Art. 6', 'Art. 6', '§ 5', 'Art. 6', '§ 1', '§ 6', 'Art. 6', '§ 7', 'Art. 6', 'Art. 6', 'Art. 6', '§ 1', '§ 8', '§ 4', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6']

Protecting personal data is an important concern to us. Processing personal data is therefore carried out in accordance with the applicable European and national laws.
You can of course revoke your consent at any time with future effect. To do this, please contact the data controller in accordance with § 1.
The following statement provides an overview of what kind of data is collected, how it is used and shared, what security measures we take to protect your information, and how you obtain details about the information provided to us.
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 S. 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.
For the processing of personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 S. lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for the performance of precontractual measures.
Insofar as processing personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 S. 1 lit. c GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the said interest, Art. 6 para. 1 S. lit. f) GDPR applies as the legal basis for processing.
The personal data of a data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this is provided for by European or national legislators in union regulations, laws, or other regulations to which we are subject as the data controller. Blocking or erasing data will also be carried out if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
§ 1 The data controller and the data protection officer
(1) Name and address of the data controller
Zahntkeller Iphofen
phone: +49 (0) 93 23 – 8 44-0
fax: +49 (0) 93 23 – 8 44-123
Email: info@zehntkeller.de
Website: www.zehntkeller.de
phone: +49 (0) 83 1 – 8680
Email: info@datenschutzprivacy.de
The privacy policy is based on the terms used by the European regulator in the adoption of the basic EU data protection regulation (hereinafter referred to as “GDPR”). The privacy policy should be easy to read and understand. To ensure this, the most important terms are explained below:
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). Identifiable refers to a person who can be identified directly or indirectly, in particular through the assignment of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of said person.
The data subject is any identified or identifiable person whose personal data is processed by the data controller for processing.
Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable person.
The data controller or the person responsible for processing means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the data controller or the specific criteria for their appointment may be laid down in accordance with Union law or the law of the Member States.
The Processor refers to a legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may be entitled to receive personal data under Union law or the law of the Member States within the framework of a particular investigation mandate shall not be regarded as recipients.
Consent is any freely given, specific, informed and unambiguous indication of the data subject/user’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Content of access (specific pages)
(2) The legal basis for temporary storage of log files is Art. 6 para. 1 S. lit. f) GDPR.
(3) Temporary storage of the IP address by the system is necessary to
enable delivery of the website to the user’s computer. To this end, the user’s IP address shall remain stored for the duration of the session.
to optimise the contents of our website as well as the advertising for it
to ensure the functionality of our information technology systems and the technology of our website
The data is stored in log files to ensure the website’s functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 S.1 lit. f) GDPR.
The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection – in this case at the end of the usage process.
If the data is stored in log files, this will be undertaken in seven days at the latest. Further storage is possible. In this case, the user’s IP addresses will be deleted or anonymised in such a way that assignment of the accessing client is no longer be possible.
Collection of data for the provision of the website and the storage of data in log files is imperative for the operation of the website, so there is no inconsistency.
(1) This site uses cookies. Cookies are small text files which, when you visit a website, are sent from a web server to your browser and stored locally on your end device (PC, notebook, tablet, smartphone, etc.) and stored on your computer and send the user (i.e. our company) certain information. Cookies are used to make the website more customer-friendly and secure, in particular to collect use-related information, such as your name, address, and email address. Frequency of use and number of users of the pages as well as page usage patterns. Cookies do not damage your computer and do not contain viruses.
This cookie contains a characteristic character string (called a cookie ID), which enables unique identification of the browser when reopening the website.
(2) We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after changing pages. The following data is stored and transmitted in the cookies:
The legal basis for processing personal data using cookies is Art. 6 para. 1 S. 1 lit. f) GDPR.
(3) The purpose of using technically necessary cookies is to simplify the use of websites for you. Some features of our website will not be available without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.
(4) Cookies remain stored even when the browser session is terminated and can be called up again when the page is visited again. However, cookies are stored on your computer and transmitted to our site. You therefore have full control of the use of cookies. If you do not wish data to be collected via cookies, you can set your browser via the “Settings” menu so that you are informed about the setting of cookies or you can generally exclude cookies being set or also delete cookies individually. However, it should be noted that the functionality of this website may be limited if cookies are deactivated. As far as session
§ 5 E-Commerce
(1) If you would like to order from our online shop, it is necessary for the conclusion of the contract that you give us your personal data which we need to complete your order. The information required for the processing the contract is marked separately; any further information is voluntary. The data is entered into a contact form, transmitted to us, and stored. The following data is collected for ordering via the online shop:
Address (different delivery address if applicable)
Data is only sent to third parties is this is necessary for the purpose of the contract or for account purposes and/or for the collection of the payment or you have expressly consented to this. In this regard, we only pass on the data required in each case. The data recipients are
The respective delivery/shipping company (name and address are sent)
Collection companies if payment must be collected (name, address, order details are sent)
Credit agencies to check creditworthiness (name, address, date of birth, etc. are sent). In this case, the data is only sent if we make advance payments for orders (e.g. purchase on account).
The bank for collecting the payment if the payment is made via direct debit
(2) The legal basis is 6 para. 1 S. 1 lit. b) GDPR. With regard to voluntary data, the legal basis for the processing of the data is Art. 6 para. 1 S. 1 lit. a) GDPR.
(3) The data collected is required for the fulfilment of the contract with the user (for sending the goods and confirming the contents of the contract). We therefore use the data to answer your inquiries, to process your order, and if necessary, to check the creditworthiness or recovery of a claim and for the purpose of technical administration of the website. The voluntary information was provided to prevent misuse and, if necessary, to investigate criminal offences. We may also process the data you provide in order to inform you of other interesting and similar offers from our own portfolio or to send you emails containing technical information.
(4) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. We are obliged by commercial and tax law to store your address, payment, and order details for a period of ten years after implementing the contract. However, after [two years] we limit the processing of your data, that is, your data will only be used to comply with legal obligations. If there is a continuing obligation between ourselves and the user, we store the data for the entire term of the contract and for ten years thereafter (see above). With regard to the data voluntarily provided, we will delete the data upon expiry of [two] years after execution of the contract, unless another contract is concluded with the user during this period; in this case, the data will be deleted upon expiry of [two] years after implementation of the last contract.
(5) If the data is required for the fulfillment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.
Otherwise, you are free to have the personal data provided during registration completely deleted from the database of the data controller. The data controller will inform you at any time upon request of which personal data relating to the data subject is stored. Furthermore, the controller shall correct or delete personal data at the request or notice of the data subject, provided that there is no legal obligation to keep such data in safekeeping. You can contact the data controller or the data protection officer pursuant to § 1 at any time by email or post and ask for deletion/modification of the data.
§ 6 Sending personal data to third parties
(1) We have included YouTube videos in our online offer, which are stored on http://www.YouTube.com and can be played directly on our website. [They are all integrated in the “Extended Privacy Mode”, i.e. no data about you as a user is sent to Youtube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer. When you visit this website, YouTube receives the information that you have accessed the corresponding subpage of our website.
Device-specific information, such as the hardware used; the version of the operating system; unique device identification and information about the mobile network including your telephone number.
Log data in the form of server logs. This includes, but is not limited to, details of how the services were used, such as search queries; IP address; hardware settings; browser type; browser language; date and time of your request; source page; cookies that uniquely identify your browser or Google Account.
Site-related information. Google may collect information about your actual location. This includes, for example, your IP address, your WLAN access points, or mobile phone masts.
This takes place regardless of whether YouTube makes available a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account.
(2) The legal basis for processing the personal data of users is Art. 6 para. 1 S.1 lit. f) GDPR. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/eu-us-framework.
(3) The integration of the videos serves to make the website clearer for the user and to increase the search engine ranking of the website on Google. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or requirements-oriented design of its website. Such evaluation also takes place (even for users who are not logged in) for the purposes of providing customised advertising and to inform other social network users about activities on our website.
(4) If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button.
(6) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. You will find more information there on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.
(7) Links to external websites: This website contains links to external sites. We are responsible for our own content. We have no influence over the contents of external links and are therefore not responsible for them, in particular we do not adopt their contents as our own. If you are directed to an external site, the privacy policy provided there applies. If you notice any illegal activities or contents on this page, please let us know. In this case we will check the content and respond accordingly (notice and take down procedure).
Privacy policy for the use of the booking system DIRS21
We would like to strengthen your confidence in the booking system DIRS21 of the operator “TourOnline AG” for booking hotels, hosts and package deals, which is integrated into this website, and make the booking process and the handling of the data collected during the booking process transparent to you. For this reason, you can find out here what information is requested from you and how this information is processed.
Anonymous search for available rooms, hotels or packages with DIRS21
It is not necessary for you to provide any personal information in order to check the availability of hotels and other hosts.
Booking via booking system DIRS21
If you would like to book a free room or a package, personal data are necessary for the reservation of you, these are in particular name, address, telephone number and your email address. These data are stored in the system for each booking under a booking number and are communicated to the booked host by fax. The booked host can view these data at any time again in a protected customer area accessible only to him. Export or automatic further processing is not possible. We would like to point out expressly that in particular your email address is not used for advertising or mass mail purposes. Anonymised data are processed for statistical purposes. We may use third-party service providers to process your personal information on our behalf for the purposes set out above. For example, we may share some information about you with these third parties so that they can contact you directly by email (for example, to receive a post-evaluation of your travel experience).
Right of access to booking system DIRS21
As a user of the DIRS21 booking system integrated into this website, you will receive information from the operator “TourOnline AG” about which information has been recorded by you in the system. This service is free of charge. If you need it, please contact kundenservice@dirs21.de or the DIRS21 customer hotline at 07153-925050.
Deleting your personal data from the DIRS21 booking system
If you wish, the operator “TourOnline AG” will delete the personal data recorded in the DIRS21 booking system as soon as the arrival date advised by the booking has been reached. This service is free of charge, if required please contact us by email at kundenservice@dirs21.de or the DIRS21 customer hotline at 07153-925050. You will then receive a confirmation of the deletion of your data.
This website uses Google Maps, the product of Google Inc. By using this website, you consent to the collection, processing and use of automated data by Google Inc, its agents and third parties. The Google Maps Terms of Use can be found at https://www.google.com/intl/de_US/help/terms_maps/.
§ 7 Contact form and email contact
(1) There is a contact form on our website that can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be sent to us and stored. This data includes:
Name (optional / no mandatory field)
E-Mail (mandatory field for replies)
A message text (optional / no mandatory field)
If this includes information about communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.
(2) The legal basis for processing the data, if the user’s consent to this has been obtained, is Art. 6 Para. 1 S. 1 lit. a) GDPR. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 p.1 lit. f) GDPR. If you send us an e-mail with the intention of entering into a contract with us, this creates an additional legal basis for its processing per Art. 6 para. 1S. 1 b) GDPR.
(3) We only use personal data provided on contact forms to make the requested contact. The data from your email inquiries will of course only be used for the purpose for which you made them available to us when contacting us. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data. Processing other personal data during the sending process serves the purpose of preventing the misuse of the contact form and to ensure the security of our information technology systems.
(4) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by e-mail, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of 14 days.
(5) You have the option of revoking your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. It will not be possible to continue the conversation in this case. Regarding the revocation of the consent / objection of storage, we ask you to contact the data controller or the data protection officer according to § 1 via email or post. All personal data stored in the course of contacting us will be deleted as a result.
§ 8 Web analysis by Google Analytics (with pseudonymisation)
(1) On our website we use the service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyze the surfing behavior of our users. The software sets a cookie on your computer (for cookies see § 4). If individual pages of our website are accessed, the following data is stored:
Entry pages, exit pages,
The time spent on the site and the rate of termination
Country of origin and regional origin, language, browser, operating system, screen resolution, use of Flash or Java
used search engines and used search terms
(2) The information generated by the cookie about the use of this website by users is generally transmitted to a Google server in the USA and stored there. This website uses Google Analytics with the extension “_anonymizeIp()”. The software is set so that the IP addresses are not stored completely, but only in abbreviated form. In this way, it is no longer possible to assign the shortened IP address to the calling computer. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not, however, combined with other data from Google.
(3) The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f) DSGVO. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(4) Google will use this information on our behalf to evaluate your use of the website and to compile reports on website activity. By evaluating the data collected, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. In these purposes also our legitimate interest lies in the processing of the data. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.
(5) The data shall be deleted as soon as they are no longer required for our recording purposes. In our case this is the case after 12 months.
(6) The cookies used are stored on your computer and transmitted to our site by this computer. If you do not agree with the collection and evaluation of usage data, you can prevent this by setting your browser software accordingly by deactivating or restricting the use of cookies. Cookies that have already been saved can be deleted at any time. However, in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link. The current link is: http://tools.google.com/dlpage/gaoptout?hl=en.
(7) If you visit our website with your mobile device, you can also object to its use by deactivating Google Analytics by clicking on the following link: Deactivate Google Analytics. In this case, a cookie is set in your browser, which tells Google to prevent tracking.
(8) Responsible is Google Ireland Ltd, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. Further information can be found in the user conditions under http://www.google.com/analytics/terms/de.html, in the overview of data protection under http://www.google.com/intl/de/analytics/learn/privacy.htmlsowie in the data protection declaration under http://www.google.de/intl/de/policies/privacy.
If your personal data is processed, you are a data subject as defined by the GDPR and you have the following rights with respect to the data controller:
The right to withdraw data protection consent
The right not to apply an automated decision
The right to file a legal complaint with a supervisory authority
he purposes for processing the personal data;
If you contest the accuracy of your personal data for a period that enables the data controller to verify the accuracy of the personal data;
the data controller no longer needs the personal data for processing purposes, but they are required by you for the establishment, exercise or defence of legal claims or
you withdraw your consent on which the processing is based according to Art. 6 Para. 1 lit. a) or Art. 9 para. 2 (a) GDPR, and where there is no other legal ground for its processing.
You object pursuant to Art. 21 Para. 1 of the GDPR, and there are no overriding legitimate grounds for processing, or you submit an objection to the processing pursuant to Art. 21 para. 2 GDPR to the processing;
The personal data concerning you must be deleted for compliance with a legal obligation under Union or Member State law to which the data controller is subject.
for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 (h) and (i), as well as Art. 9 para. 3, GDPR;
for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in clause (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or
the processing is based on consent pursuant to Art. 6 Para. 1 lit. a) of the GDPR or Art. 9 para. 2 lit. a) of the GDPR or on a contract pursuant to Art. 6 para. 1 (b) GDPR and
(4) In order to exercise the right to data portability, the data subject may at any time contact the controller.
(3) If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
(1) You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision: