Source: https://www.portals-hills.com/privacy-policy/
Timestamp: 2018-11-15 11:32:42
Document Index: 544686741

Matched Legal Cases: ['Art. 15', 'Art. 16', 'Art. 17', 'Art. 21', 'Art. 7', 'Art. 20', 'Art. 20', 'Art. 21', 'Art. 6', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 21', 'Art. 21', 'Art. 21', 'Art. 21', 'Art. 6', 'Art. 21', 'Art. 21', 'Art. 6', 'Art. 21', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 21', 'Art. 21', 'Art. 21', 'Art. 6', 'Art. 21']

We reserve the right to adapt the privacy policy with future effect, in particular in the event of further develop-ment of the website, the use of new technologies or changes to the legal bases or the corresponding case law.
We recommend that you read this privacy policy from time to time and take a printout or a copy for your doc-uments.
•	In the following, website means all of the controller’s pages at www.portals-hills.com/de/;
•	personal data means any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified, either directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that are an expression of the physical, physiological, genetic, psychological, econom-ic, cultural or social identity of that natural person. Personal data is therefore, for example, a person’s name, email address and telephone number, but may also include information about preferences, hobbies and memberships;
•	processing means operations or sets of operations carried out with or without the aid of automated proce-dures in connection with personal data, such as the collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction;
•	pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person;
•	consent means any freely given, specific, informed and unambiguous indication of the data subject’s wish-es in a particular case by which he or she, by a statement or by a clear affirmative action, signifies agree-ment to the processing of personal data relating to him or her;
•	Google means Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.
This privacy policy applies to all pages of https://www.portals-hills.com/de/. It does not cover any linked websites of other providers.
Tel.: 952 70 29 78 (extension 3)
•	right of access (Art. 15 GDPR),
•	right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
•	right to object to processing (Art. 21 GDPR),
•	right to withdraw your consent (Art. 7(3) GDPR),
•	right to receive the data in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR)
You can assert your rights by informing us using the contact details specified above under ‘Responsible provid-er’ or by contacting the data protection officer designated by us.
•	hostname of the accessing device
•	referrer URL (website visited before)
•	volume of data transferred
The access data is not used to identify individual users and is not combined with other data sources. The ac-cess data is deleted when it is no longer required for achieving the purpose of its processing. In the case of re-cording the data to provide the website, this is the case when you end your visit to the website.
IP addresses are stored in log files to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context either. In principle, data is deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or so trans-formed that an assignment of the retrieving client is no longer possible.
The recording of data for the provision of the website and the processing of data in log files is an absolute ne-cessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legit-imate reasons on the basis of which we will continue processing.
•	items in shopping basket
In addition, we also use cookies on the website which enable an analysis of users’ surfing behaviour. For ex-ample, this involves processing the following data in the cookies:
•	entered search terms
These cookies are used to make using the website more efficient and attractive. The legal basis of this pro-cessing is Art. 6(1) Sentence 1(f) GDPR. The technically non-essential cookies are automatically deleted after a specified period, which may vary depending on the cookie.
You can object to the processing of your data by cookies. Your right of objection exists if you have reasons aris-ing from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). If you do not wish to use cookies, you have the option of chang-ing your browser settings in order to generally or selectively block the placement of cookies or remove stored cookies. You can also have the corresponding information displayed before a cookie is placed. If you change the browser settings for the use of cookies or disable cookies, the functionality of this website may be restricted.
At the moment when you submit the message to us, the following data will also be processed:
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the con-tact is made with the intention of concluding a contract.
You have the possibility to object to the processing of your personal data for contact requests at any time. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compel-ling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In particular, you have a right of objection if processing is not necessary to fulfil a contract with you, which is described by us in the previous description of the functions. In such a case, it may not be possible to continue processing the re-quest. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
We process your personal data if and to the extent necessary for the initiation, creation, execution and/or ter-mination of a legal transaction with our company. The legal basis from this results from Art. 6(1) Sentence 1(b) GDPR.
•	it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you) (Art. 6(1) Sentence 1(b) GDPR), or
•	a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are ex-pressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or
•	there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR) or
•	there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR) or
•	we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR) or
•	the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR) or
•	we are authorised or even obliged to pursue overriding legitimate interests (Art. 6(1) Sentence 1(f) GDPR).
If you wish to submit an order or booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, your address and your email address. The man-datory data required for order and contract processing is marked as such; further information is provided vol-untarily. We process your data for order processing; in particular, we will forward payment data to your chosen payment service provider or our main bank. When you make your booking or a booking request, the booking information is also transferred to external operators of internet booking engines (e.g. TourOnline AG, Borsig-straße 26, 73249, Wernau; “DIRS 21”) for purposes of contract performance or preparation. The legal basis for the processing is Art. 6(1) Sentence 1(b) GDPR. To prevent unauthorised third parties from accessing your personal data, the order process on the website is encrypted using SSL/TLS technology.
As soon as storage is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data. Due to mandatory commercial and tax regulations, we are obliged to keep your address, payment and order data for a period of ten years. After two years after termina-tion of the contract, we will restrict the processing and reduce the processing to compliance with our existing legal obligations.
We reserve the right to process the email address provided by you when booking in accordance with the statu-tory provisions in order to send you, among other things, the following content by email whilst or after pro-cessing the contract, unless you have already objected to this processing of your email address:
•	other interesting offers from our portfolio,
•	information about company events,
•	questions about special requirements,
•	overview of possible leisure offers,
•	information on finding us by public transport.
You have the possibility to subscribe to our email newsletter on the website, which we use to inform you regu-larly about the following content:
•	offers from our portfolio,
•	third-party offers (including events), provided you have consented to this.
•	recipient (name or pseudonym)
•	date/time of registration for the newsletter,
•	time when you click on the confirmation link.
We process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and to prevent abuse of your personal data. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. We process this data until two years after termination of the contract. If registration for the newsletter takes place and it is unrelated to the conclusion of a contract, we pro-cess this data until two years after termination of the usage. We delete this data when the newsletter subscrip-tion ends.
After your confirmation, we will process the email address and name/pseudonym of the recipient concerned for the purpose of sending our email newsletter. The legal basis of the processing is Art. 6(1) Sen-tence 1(a) GDPR. We delete this data when you unsubscribe from the newsletter.
You can withdraw your consent to the processing of your email address for receiving the newsletter at any time, either by sending us a message (see the contact details under ‘Responsible provider’) or by clicking di-rectly on the unsubscribe link in the newsletter. This does not affect the lawfulness of processing that has oc-curred based on the consent up until the point of your withdrawal (Art. 13(2)(c) GDPR).
We use the data collected in this way to create a user profile in order to tailor the newsletter to your individual interests. Here we record when you read our newsletters, which links you click on in them and draw conclu-sions about your personal interests. We link this data to actions you perform on our website. The information is processed for as long as you have subscribed to the newsletter. Once you unsubscribe, we process the data for purely statistical purposes and anonymously.
You have a general right of objection to data processing for direct marketing purposes and are not required to give reasons (Art. 21(2) GDPR). You can object to this tracking at any time by clicking on the separate unsub-scribe link provided in each newsletter or by informing us using the contact details provided under ‘Responsi-ble provider’.
We use the email marketing service MailChimp, provided by Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, web: https://mailchimp.com/; hereinafter referred to as “Mail-Chimp”).
If you have registered for the newsletter, the data provided during registration will be stored and processed on MailChimp’s servers in the USA. MailChimp processes this information for sending and analysing the newslet-ters on our behalf. MailChimp newsletters contain what are known as web beacons, which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. In the context of the retrieval, technical information, such as the browser used, time of the page retrieval and IP address, is collected. This information is processed to analyse and technically improve the services. Furthermore, it is analysed whether newsletters are opened, when they are opened and which links are clicked on by the reader. This information can theoretically be assigned to individual newsletter recipients. However, neither we nor MailChimp have any intention of monitoring individual recipients; the analysis of the information mentioned serves rather to recog-nise the reading habits of the recipients so as to better adapt and distribute our newsletter content accordingly. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how long Mail-Chimp stores data and have no way of influencing this.
Furthermore, MailChimp has informed us that it may use the transferred data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of newsletters. According to its own declara-tions, MailChimp neither processes the data in order to write to you with its own advertising nor transmits the data to third parties.
As the recipient of the newsletter, you may be redirected to the MailChimp website, for example if there are problems displaying the newsletter in your email client and you follow the link contained in the newsletter to retrieve the newsletter online. In this context, we would like to point out that further analysis services and cookies may be used on the MailChimp website, which may process your personal data on behalf of Mail-Chimp. We have no influence on this processing.
In principle, your personal data is only passed on to the extent necessary for the execution of the contract. Spe-cifically for payment processing, we transmit the payment data required for this to the bank commissioned with the payment or, if applicable, to the payment and invoicing service provider commissioned by us.
The processing is performed on the basis of Art. 6(1) Sentence 1(b) GDPR (processing for the performance of a contract). The data required for payment processing is transmitted securely using SSL encryption and pro-cessed exclusively for payment processing. As soon as storage is no longer necessary, we delete the data gener-ated in this context or, if statutory retention obligations apply, restrict processing of the data.
Transmission of personal data for purposes of enforcing rights/ascertaining an address/debt collec-tion
In the event of non-payment, we reserve the right to pass on the data provided at the time of booking to a lawyer and/or to external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss, Germany) if we have a legitimate interest pursuant to Art. 6(1) Sentence 1(f) GDPR in order to ascertain an ad-dress and/or enforce our rights.
You have the possibility to object to the processing of your data at any time. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In particular, you have a right of objection if pro-cessing is not necessary to fulfil a contract with you, which is described by us in the previous description of the functions. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will contin-ue processing.
We use external hosting services for the provision of the following services: infrastructure and platform ser-vices, computing capacity, storage resources and database services, security and technical maintenance ser-vices. This involves processing all data necessary for the operation and use of our website.
The recording of data for the provision and use of the website and the processing of data using external web hosting services is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, more-over, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.
You can object by installing a JavaScript blocker such as the browser plug-in NoScript (www.noscript.net) or disabling JavaScript in your browser. Your right of objection exists if you have reasons arising from your par-ticular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). This may however result in functional restrictions on the website.
You can object to the processing by changing your browser settings in such a way that the browser does not support web fonts – although then your device will use a default font. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the pro-cessing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legit-imate reasons on the basis of which we will continue processing.
This website also uses Google’s Google Translate service to translate words, sentences and websites between German and other languages, thus providing you with a convenient means of using the functions on the website.
For this purpose, the browser you are using must connect to Google’s servers. By doing so, Google becomes aware that our website has been accessed via your IP address. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Our use of Google Translate is in the interest of a uniform and visually appealing presentation of our online offers. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how long Google stores data and have no way of influencing this.
You can object to the processing by changing your browser settings in such a way that the browser does not support Google Translate – although this might mean that not all texts are translated by your device. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).
For more information about the purpose and scope of processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: http://www.google.de/intl/en/policies/privacy. For more information about the Google Translate terms of use, please refer to https://policies.google.com/terms?hl=en.
➡	by setting your browser software accordingly; in particular, disabling third-party cookies means that you will not receive any ads from third-party providers;
➡	by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initiative via the link http://www.aboutads.info/choices; please note that this setting will be erased if you erase your cookies.
The videos are all embedded in ‘extended privacy mode’, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos is the following data trans-ferred. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under ‘Access data’ is submitted. This occurs regardless of wheth-er YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You have the right to object to the processing, although you must contact YouTube to exercise this right. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compel-ling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our web-site, it may no longer be possible to use the full functionality of the website.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long Vimeo stores data and have no way of influencing this. We have concluded ‘standard contractual clauses’ with Vimeo in order to obli-gate Vimeo to maintain an appropriate level of data protection.
You have the right to object to the processing, although you must contact Vimeo to exercise this right. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our web-site, it may no longer be possible to use the full functionality of the website.
This website also uses the Google Maps service from Google to display maps or sections of maps, thus ena-bling you to conveniently use the map function on the website.
For more information about the purpose and scope of processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: http://www.google.de/intl/en/policies/privacy. Google also process-es your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For more information about the Google Maps terms of use, please refer to https://www.google.com/intl/de_de/help/terms_maps.html.
You have the right to object to the processing, although you must contact Google to exercise this right. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compel-ling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our web-site, it may no longer be possible to use the full functionality of the website.
We use Google Custom Search Engine (“Google CSE”) as our core search service. The integrated search service enables a full-text search of content on this website.
For the user’s information, the text “Search with Google™ ...” is displayed in the search box. If the user selects the text field of the search box and enters a search term, an additional link will appear beneath the search box, which refers to this data protection information.
No data is transferred to Google until you activate the search box, start a full-text search and in turn access the search results page. By using the search function within the search results page, your data will also be trans-ferred to Google at the same time. This includes, for example, the search terms you entered and the IP address of the device you are using. If you visit our official website without activating Google CSE, in principle no data will be transferred to Google. We would like to point out that the processing of any personal data transferred in this manner is the responsibility of Google and that we have no influence on the type or scope of the data trans-ferred or on its further processing. If you are simultaneously logged in to Google, the Google service is able to link the information directly to your user profile. You should log out to prevent the collection of profile infor-mation about you.
This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in abbreviated form, meaning that any association with individual persons can be ruled out. As far as the data collected about you relates to you personally, that relation is therefore excluded immediately and the personal data thus erased without delay. We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us to im-prove our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis of the processing by Google Analytics is Art. 6(1) Sentence 1(f) GDPR. The Analytics cookies are deleted after 14 months at the latest.Google Analytics In order to tailor our website perfectly to your interests, we use Google Analytics, a web analytics service from Google. Google Analytics uses ‘cookies’ (see ‘Cookies’ above), which are stored on your device to enable the analysis of how you use the website. The information generated in this way about your use of this website is transferred to and stored by Google on a server in the USA.
Google will not associate your browser’s IP address transmitted for Google Analytics purposes with any other data held by Google. This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are further processed in abbreviated form, meaning that any association with individual persons can be ruled out. As far as the data collected about you relates to you personally, that relation is therefore excluded immediately and the personal data thus erased without delay. We use Google Analytics to analyse and regularly improve the use of our website. The statistics help us to im-prove our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis of the processing by Google Analytics is Art. 6(1) Sentence 1(f) GDPR. The Analytics cookies are deleted after 14 months at the latest.
The website also uses the Website Custom Audiences function by means of the so-called Facebook Pixel, pro-vided by Facebook, Inc. (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter referred to as “Facebook”).
This allows users of the website to see interest-based advertisements (“Facebook Ads”) when visiting the so-cial network Facebook or other websites that also use the process. Here we are pursuing the interest of showing you ads that are of interest to you in order to make our website more interesting for you.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to what we know: By integrating Facebook Custom Audi-ences, Facebook receives the information that you have retrieved the corresponding page on our website, or that you have clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will obtain and store your IP address and other identifying information.
The legal basis of the processing of your data is Art. 6(1) Sentence 1(f) GDPR. In this case, we do not store any personal data about you. We have no knowledge of how long Facebook stores data and have no way of influenc-ing this.
To use Facebook Analytics we also use the so-called tracking pixel, provided by Facebook, Inc. (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter referred to as “Facebook”) to track your user behaviour. The information obtained by the tracking pixel cookie serves us solely for statistical purposes, is transmitted to us anonymously by Facebook and does not provide any information about the person of the user. Facebook will, however, connect the information to your Facebook account, store and use it for its own promotional purposes in accordance with Facebook’s Privacy Policy, and may also transfer your data to Face-book’s partners. Even if you are not registered with Facebook or have not logged in, it is possible that the pro-vider will obtain and store your IP address and other identifying information.
The processing of your data in this regard is in accordance with Art. 6(1)(f) GDPR. By using Facebook Analyt-ics, we are pursuing the interest of being able to better evaluate our website and improve our range of services. In this case, we do not store any personal data about you. We have no knowledge of how long Facebook stores data and have no way of influencing this.
Logged-in users can disable the Facebook Analytics function at https://www.facebook.com/settings/?tab=ads# in order to exercise their right to object. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).
These advertising media are delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google AdWords stores a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequen-cy), the last impression (relevant for post-view conversions) and opt-out information (marker showing that the user no longer wishes to be targeted).
These cookies allow Google to recognise your internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their device has not yet expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this site. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We do not process any personal data ourselves in the aforementioned advertising measures. We only receive statisti-cal analyses from Google. On the basis of these analyses, we can recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising media; in particu-lar, we cannot identify users on the basis of this information.
You have the right to object to the processing of your data. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exer-cise or defend against legal claims (Art. 21(1) GDPR).
by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initia-tive via the link http://www.aboutads.info/choices; please note that this setting will be erased if you erase your cookies;
For further information about privacy at Google, please refer to: http://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/de.html. Alterna-tively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
You have the right to object to the processing of your data. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exer-cise or defend against legal claims (Art. 21(1) GDPR). There are various ways in which you can prevent your participation in this tracking procedure:
by disabling cookies for conversion tracking, by setting your browser in such a way that it blocks cook-ies from the domain www.googleadservices.com, https://www.google.de/settings/ads; please note that this setting will be erased if you erase your cookies;
Furthermore, our website uses Google’s online marketing tool DoubleClick. DoubleClick uses cookies to dis-play relevant ads to users, improve campaign performance reports, and to prevent a user from seeing the same ads more than once. Google uses a cookie ID – a pseudonymous identification number assigned to your brows-er – to track which ads are displayed in which browser and can thus prevent them from being displayed more than once. This pseudonym is assigned information about user activities on the website. This allows Google and its partner sites to display ads based on previous visits to websites. In addition, DoubleClick can use the cookie ID to record conversions related to ad requests. This happens for example when a user sees a Dou-bleClick ad and later visits the advertiser’s website with the same browser and buys something there.
The information generated by DoubleClick cookies is transferred to and stored by Google on servers in the USA. Google complies with the data protection provisions of the EU-US Privacy Shield agreement and is certified for the Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The data will only be transferred to third parties within the scope of legal regulations or order processing. According to Google, DoubleClick cook-ies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: By integrating DoubleClick, Google re-ceives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. The DoubleClick cookies are deleted after six months at the latest. By using DoubleClick, we are pursuing the interest of showing you ads that may be of in-terest to you in order to make our website more interesting for you.
You have the right to object. Your right of objection exists if you have reasons arising from your particular situa-tion, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). There are various ways in which you can prevent your participation in this tracking proce-dure:
•	Facebook (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework; hereinafter: “Facebook”);
•	Google (see ‘Definitions’, https://www.google.com/policies/privacy/partners/?hl=en. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
•	Instagram, Inc., 1601 Willow Road, Menlo Park, California 94025, USA (data protection information at: https://help.instagram.com/155833707900388);
•	Pinterest, Inc., 635 High Street, Palo Alto, CA, 94301, USA (data protection information at: https://policy.pinterest.com/en/privacy-policy);
•	Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA (data protection information at: https://www.tumblr.com/privacy);
•	Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (https://twitter.com/privacy. Twitter has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
•	TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494 USA, data protection information at: https://tripadvisor.mediaroom.com/DE-privacy-policy;
•	Bodas.net (Wedding Planner, S.L.U., Edificio Testa, Avenida Alcalde Barnils, 64-68, 4a planta, 08174 Sant Cugat del Vallès, Barcelona, Spain), data protection information at: https://www.bodas.net/legal/cookies.php.
We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding page of our website. In addition, the data mentioned under ‘Access data’ is submit-ted.
In the case of Facebook and XING, according to the respective providers’ own information, IP addresses in Ger-many are anonymised immediately after their collection. By activating the plug-in, personal data about you is therefore transferred to the respective plug-in provider and processed there (in the USA in the case of US pro-viders). Since the plug-in provider collects data via cookies in particular, we recommend that before clicking on the greyed-out box you delete all cookies using your browser’s security settings.
Copyright Ⓒ by Spirit Legal LLP