Source: https://www.allgaeu-apartment.de/index.php/en/15-homepage/189-dsgvo-en
Timestamp: 2019-05-20 20:50:41
Document Index: 28766159

Matched Legal Cases: ['Art. 6', 'Art. 44', 'Art. 16', 'Art. 20', 'Art. 77', 'Art. 7', '§ 257', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6']

Allgäu Apartment - General Data Protection Regulation (GDPR)
Prices/Contact us
Hintere Molkereistr. 6
Managing director/ Owner: Frank Henninger
Link to the legal notice: http://www.allgaeu-apartment.de/index.php/de/?option=com_content&view=article&id=15
- contact information (e.g., e-mail, phone numbers)
- usage data (e.g., websites visited, interest in content, access times)
Categories of the persons concerned
Visitors and users of the online offer (hereinafter we refer to the persons concerned as "users")
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data are not assigned to an identified or identifiable natural person.
"Profiling" means any kind of automated processing of personal data which involves the use of such personal data in order to evaluate, analyze or predict certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, interests, reliability, behavior, domicile or relocation.
"Responsible person" means the natural or legal person, public authority or body that decides, alone or in concert with others, on the purposes and means of processing personal data.
"Processor" means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the responsible person.
Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and separation. We have also set up procedures to ensure and detect the rights of the concerned persons, data deletion and a reaction of threat to data security. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection through technology design and privacy-friendly default settings (Article 25 GDPR).
If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a legal permission (eg if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) (b) GDPR to fulfill the contract), and if you have consented to a legal obligation or based on our legitimate interests (for example the use of agents, webhosters, etc.).
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special requirements of Art. 44 et seq. GDPR. In this case the processing is for example on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the US through the Privacy Shield) or in compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
In conformity with Art. 16 GDPR you have the right to demand the completion of the data concerning you or the correction of any incorrect data about you.
You have the right to obtain the data relating to you, which you have provided to us, in accordance with Art. 20 GDPR and request their transmission to other responsible persons.
In compliance with Art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority.
You have the right to withdraw any consent in accordance with Art. 7 para. 3 GDPR with effect for the future
Cookies and the right to object in direct mail
We can use temporary and permanent cookies and clarify this in the context of our data privacy statement.
A general contradiction to the use of cookies used for online marketing purposes can be made especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be avoided by switching them off in the settings of the browser. Please note that not all features of this online offer may then be used.
The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 GDPR. Unless explicitly stated in this data privacy statement, the data stored by us are deleted as soon as they are no longer required for their purpose and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. That means that the data is blocked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax-based reasons.
According to the legal provisions in Germany, the storage takes place in particular for 10 years according to Articles 147 para. 1 AO (Tax Code), 257 para. 1 No. 1 and 4, para. 4 HGB (Commercial Code) (books, records, management reports, accounting documents, trading books, for tax documents relevant) and 6 years in accordance with § 257 (1) No. 2 and 3, para. 4 HGB (commercial letters).
We process the data of our contractual partners and interested parties as well as other clients, customers, clients, clients or contractual partners (uniformly referred to as "contractual partners") in accordance with Art. 6 para. 1 lit. b. GDPR in order to provide you with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship.
The processed data includes the master data of our contractual partners (eg, names and addresses), contact data (for example e-mail addresses and telephone numbers) as well as contract data (eg, services used, contract contents, contractual communication, names of contact persons) and payment data (for example bank details, payment history).
We process data which are necessary for the establishment and fulfillment of the contractual services and point out the necessity of their being indicated, if this is not evident for the contractual partners. Disclosure to external persons or companies will only be made if required by a contract. When processing the data provided to us within the framework of an order, we act in accordance with the instructions of the client as well as the legal requirements.
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically sends to us as part of a page request. These are:
- Referer URL
Furthermore, based on our business interests, we store information about suppliers, promoters and other business partners, e.g. for later contact. We generally store these mainly company-related data permanently.
When contacting us (for example via contact form, e-mail, telephone or via social media) the information of the user to process the contact request and its processing is made in accordance with. Art. 6 para. 1 lit. b. (in the context of contractual / pre-contractual relationships), Art. 6 para. 1 lit. f. (other requests) GDPR. The user information can be stored in a Customer Relationship Management System ("CRM System") or in a similar request organization.
We expressly point out that the transmission of data on the Internet (for example by email) has security gaps and can not be completely protected against access by third parties. This also applies to the contact form on this website, which transmits the entered data by e-mail.
Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offer as defined by Art. 6 (1) lit. GDPR), Google Analytics uses a web analytics service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the users will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there.
The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to its use of the online offer and the processing of such data by Google by downloading and installing the browser plug-in available at the following link:
For more information about Google's data usage, information on setting and objection, please read Google's data privacy statement (https://policies.google.com/technologies/ads) and also read the Google's Ads Settings (https: // adssettings.google.com/authenticated).
We use Google Analytics in the design as "Universal Analytics". "Universal Analytics" means a process of Google Analytics, in which the user analysis is based on a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of different devices (so-called "cross-device tracking") ,
We use Google Analytics to display advertisements displayed within Google and its affiliate advertising services, only to those users who have shown an interest in our online offering or who have certain characteristics (eg interests in specific topics or products visited by them). We forward this information to Google (so-called "remarketing" or "Google Analytics audiences"). With Remarketing Audiences, we also want to make sure that our ads meet the potential interest of users.
We point out that data of the users outside the area of ​​the European Union can be processed. This may result in risks for the users because for example enforcement of user rights could be made more difficult. With respect to US providers certified under the Privacy Shield, we point out that they are committed to respecting EU privacy standards.
Furthermore, the data of the users are usually processed for market research and advertising purposes. Thus, for example, user profiles are created from the user behavior and from the resulting interests of the users. The usage profiles can in turn be used to for example to place advertisements inside and outside the platforms that are allegedly in line with the users' interests. For these purposes, cookies are usually stored on the computers of the users, in which the user behavior and the interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices used by the users (in particular if the users are members of the respective platforms and logged in to them).
The processing of the personal data of users is based on our legitimate interests in an effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers for a consent to the data processing (that is, they declare their agreement, for example, by ticking a check box or confirming a button), the legal basis of the processing is Art. 6 para. a., Art. 7 GDPR.
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - data privacy statement: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – data privacy statement: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – data privacy statement/ Opt-Out: http://instagram.com/about/legal/privacy/.
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - data privacy statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – data privacy statement/ Opt-Out: https://about.pinterest.com/de/privacy-policy.
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) - data privacy statement: https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - data privacy statement/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
- Wakalet (Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom) - data privacy statement/ Opt-Out: https://wakelet.com/privacy.html.
- Soundcloud (SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany) - data privacy statement/ Opt-Out: https://soundcloud.com/pages/privacy.
Integration of service and contents of third parties
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer as defined by Art. 6 (1) lit. GDPR), we make use of content or services offered by third-party providers including their content and services such as videos or fonts (collectively referred to as "content").
We embed the videos on the YouTube platform of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data privacy statement: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
We include maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, the users' IP addresses and location data, but these are not collected without their consent (usually as part of the settings of their mobile devices). The data can be processed in the USA. Data privacy statement: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer as defined by Art. 6 (1) f. GDPR) we use social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").
This may, for example, include content such as images, videos or text and buttons, with which users can share the content of this online offer within Facebook. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in Facebook's data privacy statement: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other settings and objections regarding the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices / or the EU page http://www.youronlinechoices.com/. The settings are platform independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Created with the General Data Protection Generator.de by RA (lawyer) Dr. med. Thomas Schwenke - adapted by the website operator
Legal notice General Data Protection Regulation (GDPR)
© Allgäu Apartment 2019