Travelcircus

Informativa sulla privacy

Information about the processing of your data

We are obliged under Article 12 of the General Data Protection Regulation (hereinafter: DSGVO) to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data as well as your legal rights in this respect.

We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the relevant case law.

We recommend that you read the data protection declaration from time to time and keep a printout or copy for your records.

Definitions

  • "Website" or **"Internet Presence" **hereinafter means all pages of the Controller on https://www.travelcircus.de
  • "Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data are therefore, for example, the name, e-mail address, postal address, telephone number, etc. of a person.

address and telephone number of a person, but also, where applicable, data about preferences, hobbies and memberships.

  • "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.
  • **"Pseudonymisation" **means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
  • "Consent" hereinafter means any freely given, specific, informed and unambiguous indication of consent in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
  • "Google" hereinafter means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope of application

The data protection declaration applies to all pages of https://www.travelcircus.de. It does not extend to any linked websites or Internet presences of other providers.

Responsible provider

Responsible for the processing of personal data within the scope of this privacy policy is: Travelcircus GmbH Aroser Allee 76, 13407 Berlin, Germany [email protected]

Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Fresh Compliance GmbH

Lawyer and data protection officer

Frank Trautwein

Postal address:

Data Protection Officer c/o Travelcircus GmbH, Aroser Allee 76, 13407 Berlin, Germany

Or under:

Travelcircus GmbH Aroser Allee 76, 13407 Berlin +49 30 5444 55 800 [email protected]

Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss or alteration and other external disturbances. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights with regard to personal data concerning you, which you can assert against us:

  • Right of access (Art. 15 DSGVO),
  • Right to rectification (Art. 16 DSGVO) or deletion (Art. 17 DSGVO),
  • Right to restriction of processing (Art. 18 DSGVO),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw your consent (Art. 7(3) DSGVO),
  • Right to receive the data in a structured, common, machine-readable format ("data portability") as well as the right to have the data transferred to another data controller if the conditions of Art. 20 (1) lit. a, b DSGVO apply (Art. 20 DSGVO).

You can assert your rights by notifying the contact details listed in the "Responsible provider" section or the data protection officer appointed by us.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data carried out by us (Art. 77 DSGVO).

Use of the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When you call up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This is the following data:

  • browser type/browser version
  • Operating system used
  • language and version of the browser software
  • host name of the accessing end device
  • IP address
  • Website from which the request comes
  • Content of the request (specific page)
  • Date and time of the server request
  • Access status/HTTP status code
  • Referrer URL (the previously visited page)
  • Amount of data transferred
  • Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address by the system is necessary to technically enable delivery of the website to your computer. Processing your IP address for the duration of the session is necessary for this. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The access data is not used to identify individual users and is not merged with other data sources. The access data are deleted when they are no longer required to achieve the purpose of their processing. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website. IP addresses are stored in log files to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context either. The data is generally deleted after seven days at the latest, a further processing is possible in individual cases. In this case, the IP address is deleted or alienated in such a way that it is no longer possible to assign the calling client.

The collection of data for the provision of the website and the processing of the data in log files is absolutely necessary for the operation of the website. You can object to the processing. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Cookies

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute any programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/ evaluation of website use).

a) Technically necessary cookies

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

• Language settings • Articles in the shopping basket • Log-in information

The user data collected through technically necessary cookies are not processed to create user profiles. We also use so-called "session cookies", which store a session ID, with which various requests from your browser can be assigned to the joint session. Session cookies are necessary for the use of the website. In particular, they allow us to recognise the device you are using when you return to the website. We use this cookie to recognise you on subsequent visits to the website if you have an account with us; otherwise you would have to log in again on each visit. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We use session cookies to make the use of the website more attractive and effective. The session cookies are deleted as soon as you log out or close the browser.

Most browsers are preset to accept cookies automatically. You can object to the processing of your data by cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

b) Technically unnecessary cookies

We also use cookies on the website that enable an analysis of the user's surfing behaviour. The following data, for example, is stored and processed in the cookies:

• Search terms entered • Frequency of page views • Use of website functions

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The technically unnecessary cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

You can object to the processing of your data by cookies. If you do not wish to use cookies, you can change your browser settings to block cookies generally or selectively or to remove cookies that have already been stored. You can also have corresponding instructions displayed before setting a cookie. If you change the browser settings for the use of cookies or deactivate cookies, the functionality of this website may be limited.

Insofar as we integrate third-party cookies into our website, we will inform you of this separately below.

c) Flash cookies

Furthermore, HTML5 storage objects are used which are stored on the end device you are using ("Flash cookies"). These process the required data independently of the browser used and have no automatic expiry date. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. These cookies are used to make the use of the website more efficient and attractive.

You can object to the processing of your data by cookies. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the setting of the Flash Player. If you do not wish Flash cookies to be used, please install an appropriate add-on in the browser you are using, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/).

You can also prevent the use of Flash cookies by opening the browser you are using in "private mode". Furthermore, you can manually delete the cookies and the browser history on a regular basis.

d) Cookie banner notice

When you access the website, you will be informed by an information banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, you will also be informed how to prevent the storage of cookies in the browser settings.

Contacting our company

When contacting our company, e.g. by e-mail or via the contact form on the website, the personal data you provide will be processed by us in order to answer your enquiry.

It is mandatory to provide a valid e-mail address for the processing of enquiries via the contact form on the website. Furthermore, at the time of sending the message to us, the following data will be processed:

• IP address • Date/time of registration

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO or Art. 6 para. 1 p. 1 lit. b) DSGVO if the purpose of the contact is to conclude a contract.

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data is processed exclusively for the processing of the conversation. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing to compliance with the existing legally mandatory retention obligations.

You have the option to object to the processing of your personal data for contact requests at any time. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you, which is illustrated by us in each case in the preceding description of the functions. In such a case, it may not be possible to continue processing the enquiry. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Processing and transfer of personal data for contractual purposes

We process your personal data if and to the extent that this is necessary for the initiation, substantiation, execution and/or termination of a legal transaction with our company. The legal basis for this is Article 6 (1) sentence 1 lit. b) DSGVO.

After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted, unless we have obtained your consent (e.g. consent to the processing of your e-mail address for the sending of electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of justified interests (e.g. storage for the enforcement of claims) are entitled to further storage and processing required in the respective context.

The transfer of your personal data takes place insofar as

  • it is necessary for the establishment, implementation or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider/shipping company for the processing of a contract with your person), (Art. 6 para. 1 p. 1 lit. b) DSGVO), or
  • a subcontractor or vicarious agent that we use exclusively in the context of providing the offers or services you have requested requires this data (unless you are expressly informed otherwise, such auxiliaries are only authorised to process the data to the extent that this is necessary for the provision of the offer or service), or
  • there is an enforceable official order (Art. 6 para. 1 p. 1 lit. c) DSGVO) or
  • there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) DSGVO) or
  • we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) DSGVO) or
  • the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) DSGVO) or
  • we are authorised or even obliged to disclose data in order to pursue overriding legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

Any further disclosure of your personal data to other persons, companies or bodies will take place as follows unless you have effectively consented to such disclosure. The legal basis of the processing is then Art. 6 para. 1 p. 1 lit. a) DSGVO.

Processing and forwarding of personal data in the online ordering system

If you wish to place an order or booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and e-mail address. The mandatory data required for order and contract processing are marked separately, other data are provided voluntarily. We process your data for order processing, in particular we will forward payment data to your chosen payment service provider or our house bank. In the context of your booking or booking request, booking information will also be transferred to external operators of internet booking engines (e.g. TourOnline AG, Borsigstraße 26, 73249, Wernau "DIRS 21") for contract fulfilment or preparation. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account in which we store your data for future visits to the website. When you create a customer account, the data you provide will be processed. You can edit or delete all further data, including your customer account, yourself after successful registration.

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax law regulations, we are obliged to keep your address, payment and order data for a period of ten years. After two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

Application procedure

We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you with information below on the processing of your personal data in connection with the application process. We process the data necessary for the online application process (name, e-mail address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable from 25.05.2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application procedure, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists of asserting or defending claims.

Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years. If a candidate is successful in the application process, the data from the applicant data system is transferred to our personnel information system.

We use a specialised software provider for the application process. This provider acts as a service provider for us and may also become aware of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing agreement with this provider, which ensures that the data processing is carried out in a permissible manner.

After receiving your application, your applicant data will be viewed by the HR department. Suitable applications are then forwarded internally to the person responsible for the respective open position. The further procedure is then coordinated. In principle, only those persons in the company have access to your data who need this for the proper course of our application procedure.

You have the possibility to object to the processing of your data at any time. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you, which is illustrated by us in each case in the preceding description of the functions. In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we continue the processing.

E-mail marketing

Existing customer advertising

We reserve the right to process the e-mail address provided by you in the context of the booking in accordance with the statutory provisions in order to send you the following information by e-mail during or following the processing of the contract, unless you have already objected to this processing of your e-mail address:

  • further interesting offers from our portfolio,
  • information on events organised by our company,
  • technical information,
  • questions about special requests,
  • overview of possible leisure activities,
  • information on how to reach us by public transport.

Legal basis for the processing Art. 6 para. 1 p. 1 lit. f) DSGVO. We carry out the aforementioned processing for customer care and to increase our services. We delete your data when you terminate the newsletter subscription, but no later than two years after termination of the contract. Furthermore,

we process the evaluation of the order/booking on the basis of user interests. If the sending of electronic information is not necessary for the execution of the contract (e.g. e-mail with payment information), the legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We carry out the aforementioned processing to optimise our service or the website.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. To do so, click on the unsubscribe link in the newsletter or send us your objection to the contact details stated in the section "Responsible provider/ representative of the provider in the European Union".

Newsletter

You have the option of subscribing to our email newsletter, WhatsApp newsletter, Facebool Messenger newsletter, Instagram newsletter, Telegram newsletter and browser push messages on the website, with which we will inform you regularly about the following contents:

  • Offers from our portfolio,
  • events organised by our company,
  • Offers (including events) from third parties, insofar as you have given your consent to this.
  • Special offer/ temporary offers

In order to receive the newsletter, you are required to provide the following personal data:

  • valid e-mail address
  • telephone number, if applicable

Registration for our e-mail newsletter is carried out using the double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have provided, in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation is not received within 24 hours, we block the information transmitted to us and automatically delete it after one month at the latest.

Furthermore, the following data is also processed at the time of subscription:

  • IP address
  • Date/time of subscription to the newsletter,
  • Time of your confirmation of the confirm link,

We process your IP address, the time of your subscription to the newsletter and the time of your confirmation in order to document your newsletter subscription and to prevent the misuse of your personal data. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. As far as the newsletter subscription takes place outside the conclusion of a contract, we process this data until two years after the end of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the e-mail address of the recipient concerned for the purpose of sending our e-mail newsletter. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. We delete this data when you terminate the newsletter subscription.

You can revoke your consent to the processing of the e-mail address for the receipt of the newsletter at any time, either by sending a message to us (cf. you contact details in the section "Responsible provider/ representative of the provider in the European Union") or by directly clicking the unsubscribe link contained in the newsletter.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are embedded on our website. For the evaluations, we link the data mentioned in the section "Access data" and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

With the data obtained, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to actions you have taken on our website. The information is processed for as long as you are subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.

The purpose of this is to evaluate the use and optimisation of the email advertising that we send you. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can object to this tracking at any time by clicking on the separate unsubscribe link provided in each newsletter or by informing us via the contact details mentioned in the section "Responsible provider". You can also prevent tracking by deactivating the display of images by default in your email program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

E-mail marketing service "SendGrid

We use the e-mail marketing service "SendGrid" of the company SendGrid Inc., with its registered office at 1801, California Street St, Denver, CO 80202: https://sendgrid.com hereinafter: "SendGrid") for sending newsletters. SendGrid is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is processed on SendGrid's servers in the USA. SendGrid has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Our newsletters sent with SendGrid enable us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The evaluation of the aforementioned information serves to recognise the reading habits of recipients in order to better adapt and distribute our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of the storage period at SendGrid and no possibility to influence it. Further information on data protection and the protection of your privacy can be found at https://sendgrid.com/policies/privacy/.

You can object to the processing of data for SendGrid at any time by activating the unsubscribe link at the end of the emails from SendGrid or by informing us via the contact details mentioned in the section "Responsible provider". This will simultaneously end the processing for the receipt of the newsletter and for the statistical analyses. A separate objection to the sending via SendGrid or the statistical analysis is not possible.

E-mail marketing service "Emarsys”

We use the e-mail marketing service "Emarsys" of the provider Emarsys eMarketing Systems AG, with its registered office at Hans-Fischer-Straße 10, 80339 Munich, Web:

https://www.emarsys.com/de (hereinafter: "Emarsys") for sending newsletters. Emarsys is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is also processed on Emarsys servers in the USA.

Our newsletters sent with Emarsys enable us to analyse the behaviour of the newsletter recipients. Here, among other things, it can be analysed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The evaluation of the aforementioned information serves to identify the reading habits of the recipients in order to better adapt and spread our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of the storage period at Emarsys and no possibility to influence it. Further information on data protection and the protection of your privacy can be found at https://www.emarsys.com/en/privacy-policy/.

You can object to the processing of data for Emarsys at any time by activating the unsubscribe link at the end of the emails from Emarsys or by informing us via the contact details mentioned in the section "Responsible provider". This will simultaneously end the processing for the receipt of the newsletter and for the statistical analyses. Separate objection to the sending via Emarsys or the statistical analysis is not possible.

PushCrew notification service

We use the marketing service "PushCrew" of the provider Wingify Software Pvt Ltd, E-170, Antriksh Apartments, Sector-14, Rohini, Delhi-110085 India, Web: https://pushcrew.com, hereinafter: "PushCrew". PushCrew is a service with which the newsletter dispatch can be organised and analysed. Your data is also processed on PushCrew's servers in India. We have concluded so-called "standard contractual clauses" with PushCrew in order to oblige PushCrew to maintain an appropriate level of data protection.

Our newsletters sent with PushCrew enable us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The evaluation of the aforementioned information serves to identify the reading habits of the recipients in order to be able to better adapt and distribute our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. If the newsletter registration takes place outside of the conclusion of a contract, we process this data until two years after the end of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of the storage period at PushCrew and no possibility to influence it. Further information on data protection and the protection of your privacy can be found at https://pushcrew.com/privacy-policy/.

You can object to the processing of data for PushCrew at any time by activating the unsubscribe link at the end of PushCrew's emails or by informing us via the contact details mentioned in the section "Responsible provider". This will simultaneously end the processing for the receipt of the newsletter and for the statistical analyses. A separate objection of the dispatch via PushCrew or the statistical evaluation is not possible

Messenger marketing service "WhatsBroadcast”

We use the e-mail marketing service "WhatsBroadcast" of the provider WhatsBroadcast GmbH with its registered office at Schwanthalerstr. 32, 80336 Munich,Web: https://www.whatsbroadcast.com/de/

hereinafter: "WhatsBroadcast") for sending newsletters. WhatsBroadcast is a service with which the newsletter dispatch can be organised and analysed via messenger services such as WhatsApp, Facebook, Instagram and Telegram. The data you enter for the purpose of receiving newsletters (e.g. telephone number) is also processed on WhatsBroadcast servers within the European Union.

Our newsletters sent with WhatsBroadcast enable us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The evaluation of the aforementioned information serves to identify the reading habits of the recipients in order to be able to better adapt and distribute our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of the storage period at WhatsBroadcast and no possibility to influence it. For more information on data protection and the protection of your privacy, please visit https://www.whatsbroadcast.com/de/datenschutzerklaerung/.

You can object to the processing of data for WhatsBroadcast at any time by activating the unsubscribe link at the end of the emails from WhatsBroadcast or by informing us via the contact details listed in the "Responsible provider" section. This will simultaneously end the processing for the receipt of the newsletter and for the statistical analyses. You can also object to the processing for statistical analyses by clicking on the opt-out button under the following link: https://www.whatsbroadcast.com/de/datenschutzerklaerung/ (section 3).

Payment Service Provider (PSP)/ Payment service provider

PayPal

On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 p. 1 lit. b) DSGVO (processing for the performance of a contract). We have no knowledge of the storage period at PayPal and no possibility to influence it.

PayPal Plus

If you select the payment method "Direct debit via PayPal Plus" or "Credit card via PayPal Plus" when making your booking, we will forward the personal data collected to PayPal (Europe) S.àr.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 (hereinafter: "PayPal"). The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO.

PayPal creates an invoice based on the transmitted data and, if necessary, carries out an identity and credit check. In doing so, PayPal has a legitimate interest in the transmission of the buyer's personal data and processes them in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness, Art. 6 para. 1 p. 1 lit. f) DSGVO.

These may be the agencies named at https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE and https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE.

In the credit assessment, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). PayPal bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognised scientific procedures.

In addition to the address data, information on previous payment behaviour and probability values for expected future payment behaviour are also included. We have no knowledge of the storage period at PayPal and no possibility to influence it.

You can request information, correction or deletion of the data stored by PayPal at any time and object to the processing of your personal data by PayPal at any time. However, PayPal remains entitled to process and pass on customer data if this is necessary for the contractual processing of payments (Art. 6 para. 1 p. 1 lit. b) DSGVO) or if it is required by law, by the authorities or by a third party (Art. 6 para. 1 p. 1 lit. c) DSGVO).

You can contact PayPal using the following contact form: https://www.paypal.com/de/selfhelp/contact/email/privacy. For further information on the processing of your data by PayPal, please visit https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r7.

Disclosure of personal data for credit card payments

Your personal data will only be passed on to the extent necessary for the processing of the contract. In particular, for the processing of payments, we pass on the payment data required for this purpose to the credit institution commissioned with the payment or to the payment and invoicing service provider commissioned by us, if applicable.

The processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. b) DSGVO (processing for the fulfilment of a contract). The data required for payment processing is transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

Transfer of personal data in the case of "purchase on account”

In the case of payment on account, we reserve the right to forward your data, which you provide when ordering/booking, to external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) in order to carry out a credit check.

The forwarding of this data takes place on the basis of Art. 6 Para. 1 S. 1 lit. f) DSGVO, as we make advance payments for purchases on account and bear the risk of default. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

You can object to this processing at any time, but the payment method "purchase on account" may then not be available to you.

SOFORT by Klarna

If you select the "SOFORT" payment method when making your booking, we will forward the data you provide to Sofort GmbH (Theresienhöhe 12, 80339 Munich, Germany; Web: https://www.sofort.de/; hereinafter "SOFORT") as part of the payment processing.

"SOFORT" is a direct transfer procedure, in which a transfer can already be filled in during the order process and executed in real time. For this purpose, you will be redirected to the website of the payment service provider SOFORT.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. We have no knowledge of the storage period at Klarna and no possibility to influence it. For further information on the collection and processing of your data by "SOFORT", please visit https://www.sofort.de/datenschutz.html.

Paymill

We also use "Paymill" as a payment service provider and, in the course of your booking, forward the payment method and the personal data collected to PAYMILL GmbH, St.-Martin-Strasse 63, 81669 Munich-2449 (hereinafter "Paymill") as part of the payment processing. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO.

Paymill carries out the payment processing on the basis of the transmitted data and carries out an identity and credit check if necessary. For the prevention and detection of fraud, we transmit your IP address to Paymill for this purpose. Your IP address will be stored by PAYMILL GmbH for 72 hours. In doing so, Paymill has a legitimate interest in the transmission of the buyer's personal data and processes this in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness, Art. 6 para. 1 p. 1 lit. f) DSGVO.

In the credit assessment, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). Paymill bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognised scientific procedures.

In addition to the address data, information on the previous payment behaviour as well as probability values on the payment behaviour to be expected in the future are also included. We have no knowledge of the storage period at Paymill and no possibility to influence it. Further information can be found in Paymill's data protection information at: https://www.paymill.com/de/datenschutz/.

You can object to Paymill processing your personal data at any time. However, Paymill remains entitled to process and pass on customer data if this is necessary for contractual payment processing (Art. 6 para. 1 p. 1 lit. b) DSGVO) or is required by law, official or judicial (Art. 6 para. 1 p. 1 lit. c) DSGVO).

Checkout

We also use Checkout as a payment service provider and, in the course of your booking, forward the payment method and the personal data collected to Checkout Ltd, 54 Portland Place, W1B 1DY, London (hereinafter "Checkout") as part of the payment processing. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO.

Checkout uses the transmitted data to process the payment and, if necessary, carries out an identity and credit check. For the prevention and detection of fraud, we transmit your IP address to Checkout for this purpose. Your IP address will be stored by Checkout Ltd for 72 hours. In doing so, Checkout has a legitimate interest in the transmission of the purchaser's personal data and processes this in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness, Art. 6 para. 1 p. 1 lit. f) DSGVO.

In the credit check, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). Checkout bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognised scientific procedures.

In addition to address data, information on previous payment behaviour and probability values for expected future payment behaviour are also included. We have no knowledge of the storage period at Checkout and no possibility of influencing it. You can find further information in Checkout's data protection information at: https://www.checkout.com/legal/privacy-policy.

You can object to the processing of your personal data against Checkout at any time. However, Checkout remains entitled to process and pass on customer data if this is necessary for the contractual processing of payments (Art. 6 para. 1 p. 1 lit. b) DSGVO) or is required by law, by the authorities or by the courts (Art. 6 para. 1 p. 1 lit. c) DSGVO).

Hosting

We use external hosting services which serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. All data required for the operation and use of our website is processed.

We use external hosting services for the operation of this website. By using external hosting services, we aim to provide our website efficiently and securely. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The collection of data for the provision and use of the website and the processing of the data via external web hosts is absolutely necessary for the operation of the website. You can object to the processing. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Integration of third-party content

Third-party content such as videos, maps, RSS feeds or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third party providers") are aware of the IP addresses of the users. Because without the IP address they cannot send the content to the browser of the respective user. The IP address is thus required for the display of this content.

We endeavour to only use content from third-party providers who only process the IP address to deliver the content. However, we have no influence if the third-party providers process the IP addresses, e.g. for statistical purposes. Insofar as we are aware of this, we will inform you of this below. Some of the third-party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plug-in 'NoScript' (www.noscript.net) or by deactivating JavaScript in your browser. However, this may result in functional restrictions on the website.

Google Web Fonts

We use so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

You can object to the processing by changing the browser settings so that the browser does not support web fonts - however, a standard font will then be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Bookmarks

Bookmarks, e.g. to social networks such as Facebook.com, Twitter.com, Google+, enable you as a user of certain social networks to create links from our website on your profiles in social networks in order to save them as bookmarks or share them with your contacts in social networks.

You can recognise the bookmarks on our website by the corresponding icons (e.g. "f", "g+") at the bottom of the page. When you open a page of our website, the bookmarks can store cookies on your end device/browser, which are small text files with a sequence of numbers that enable the browser to be recognised). If you are also logged into one of the social networks in question, this allows the operator of the social network to track which pages you visit, unless you have deactivated the acceptance and storage of cookies in your browser settings. When you use bookmarks, information is sent to the respective social network.

We do not control, nor can we be held responsible for, the comments or activities of people who use bookmarks for this purpose. Persons who share our content via bookmarks are not authorised to speak for us and our website or to create a corresponding appearance to third parties.

The legal basis for the use of bookmarks is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the further processing and storage duration on the part of the social network operators and no corresponding possibilities of influence.

You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. You can also prevent the creation of user profiles in various ways and thus make use of your right to object:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
  • by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.

AddThis bookmarking

The website includes plug-ins from AddThis, a service provided by AddThis Inc. (1595 Spring Hill Rd, Suite 300, Vienna, VA 22182; hereinafter "AddThis").

These plug-ins enable you to set bookmarks or share interesting content with other users. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

Via these plug-ins, your internet browser establishes a direct connection with the servers of AddThis and, if applicable, the selected social network or bookmarking service. The recipients receive the information that you have accessed the corresponding website of our online offer and the data mentioned in the section "Use of the website, access data. This information is stored on the servers of AddThis in the USA. We have entered into standard data protection clauses with AddThis. When you submit content on our website to social networks or bookmarking services, a connection may be established between your visit to our website and your user profile on the relevant network. We have no control over the data collected and processing operations, nor are we aware of the full extent, purposes of the processing and storage periods. We also have no information on the deletion of the processed data by the plug-in provider.

The plug-in provider stores these data as usage profiles and processes them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.

The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at AddThis and no possibility to influence it. If you do not wish to participate in this procedure,

you can object to the data processing at any time by setting an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out.

The opt-out cookie is set for the named domain in the browser used. If you use different end devices, change the browser after opting out or delete all cookies, you must set the opt-out cookie again using the activation link mentioned above. Alternatively, you can set your browser to prevent cookies from being set.

Further information on the purpose and scope of processing by the plug-in provider as well as further information on your rights in this regard and setting options for protecting your privacy can be found at www.addthis.com/privacy.

Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

YouTube videos

We use plug-ins of the video platform YouTube.de or YouTube.com on the website, a service which - represented by Google - is operated by YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). By means of the plug-ins, we can also integrate visual content ("videos") that we have published on Youtube.de or Youtube.com on this website.

The videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in the section "Access data" is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at YouTube and no possibility to influence it. You have the right to object to the processing, and you must contact YouTube to exercise this right.

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Further information on the purpose and scope of processing by YouTube please refer to the privacy policy at https://www.google.de/intl/de/policies/privacy.

Integration of Getty Images

On our website, we use plugins from the photo agency Getty Images, which offers images and other visual material. The provider of the Getty Images components is Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland ("Getty Images").

Getty Images allows us to embed stock images using an embed code, e.g. text, video or image data provided by a third party website. Your IP address is transmitted to Getty Images via the technical implementation of the embed code. Furthermore, Getty Images processes information about our website, the browser type used, the browser language, the time and the length of access. In addition, Getty Images may collect information about the use of our website (e.g. accessing sub-pages and clicking on links) and other interactions you have carried out when visiting our website. Getty Images also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Further information and the applicable privacy policy of Getty Images can be found at http://www.gettyimages.de/enterprise/privacy-policy.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to offer you additional service. We have no knowledge of the storage period at Getty Images and no possibility to influence it.

You have a right to object to the processing, and you must contact Getty Images to exercise it. You can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Integration of Google Maps

This website also uses the "Google Maps" service from Google to display maps or map sections, thus enabling you to conveniently use the map function on the website.

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in the section "Access data" will be transmitted to Google. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button.

Google stores your data as usage profiles and processes them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to offer you additional service. Of the storage period at Google, we have no possibility of influencing them.

You have a right to object to the processing, and you must contact Google to exercise this right. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Further information on the purpose and scope of processing by the plug-in provider can be found in the provider's data protection declarations. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Further information on the terms of use of Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

Services for statistical, analytical and marketing purposes

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised use of the website. The third-party providers use cookies to control their services (see the section "Cookies" above). Personal data is not processed, unless otherwise explained below.

Some of the third-party providers offer the possibility to directly object to the use of the respective service, e.g. by setting an opt-out cookie.

If you activate a corresponding opt-out cookie, the external provider will no longer process any data on your usage behaviour in the future. A merely selective objection to an individually made selection of external services is also possible. If you change the browser or the end device used or delete all cookies, you must set the opt-out cookie again. Furthermore, you can also opt out of the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW). (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.htm or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and the opt-out options can also be viewed at the following link: http://www.youronlinechoices.com/de/.

In the following, we inform you about the services of external providers currently used on our website as well as about the purpose and scope of the respective processing in each individual case and about your existing objection options.

Google Analytics

In order to be able to optimally adapt our website to your interests, we use Google Analytics, a web analysis service from Google. Google Analytics uses so-called "cookies" (see section "Cookies" above), which are stored on your computer and enable an analysis of your use of the website. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

In the event that IP anonymisation is activated on this website, your IP address will be stored by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension "anonymizeIp()". This means that IP addresses are processed in abbreviated form, thus making it impossible to relate them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing of Google Analytics is Art. 6 para. 1 p. 1 lit. f) DSGVO. The Analytics cookies are deleted after fourteen months at the latest.

You have the right to object. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information from the third-party provider Google can be found at: http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy

Crazy Egg

We also use the Crazy Egg analysis service to make our website better and more user-friendly. The provider of the analysis service is Crazy Egg, Inc. 16220 Ridgeview Lane, La Mirada, CA, 90638 USA (hereinafter "Crazy Egg").

Crazy Egg uses so-called "cookies", which are stored on your computer and which enable an analysis of your use of the website. This tool records movements on the observed web pages in so-called heat maps. All data is collected without us being able to assign it to specific users. We can only track how the mouse was moved, where it was clicked and how far it was scrolled. This enables us to design our website in a better and more customer-friendly way. Furthermore, the screen size of the device, the type of device, information on the browser, the country from which access was made and the preferred language are recorded. If personal data is displayed on a website, Crazy Egg automatically hides it. They are therefore not traceable for us.

To analyse your usage behaviour, Crazy Egg uses so-called "cookies" (cf. section "Cookies" above), which are stored on your computer and which allow an analysis of your use of the website. The information generated by the "tracking code" and "cookie" about your visit to our website is transmitted to the Crazy Egg servers and stored there. The tracking code collects the following information about your terminal device, such as IP address, device type and browser information, geographic location (e.g., your IP address).

Browser information, Geographical location (country only), Preferred language to display our website, Pages visited, Date and time when the website was accessed. Crazy Egg will truncate your IP address before processing it further.

The information generated about your use is transmitted to a Crazy Egg server in the USA and stored there. We have concluded so-called "standard contractual clauses" with Crazy Egg in order to oblige Crazy Egg to maintain an appropriate level of data protection.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The cookies that Crazy Egg uses have different storage periods. Some remain valid for up to five years, some only during the current visit. You can find an overview of the storage period at: https://www.crazyegg.com/cookies, More information about the Crazy Egg tool can be found at: https://www.crazyegg.com/privacy.

You can object to the processing in various ways:

  • by pressing the opt-out button at the following link: https://www.crazyegg.com/privacy or
  • by adjusting the settings of your browser software accordingly; in particular, the suppression of third-party cookies will lead you to do not receive ads from third parties or

Convert

This website uses Convert, a web analytics service provided by Convert Insights, Inc, 340 South Lemon Avenue # 9512, Walnut, California, 91789 USA, hereinafter: "Convert,"). Convert uses so-called "cookies", which are stored on your computer and which enable an analysis of your use of the website. The information generated about your use is transmitted to a Convert server in the USA and stored there. Convert observes the data protection provisions of the EU-US Privacy Shield agreement and is certified for the "Privacy Shield", https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We use Convert to evaluate and regularly improve the use of the website. The statistics enable us to improve our offer for you and make it more interesting. The Convert cookies are deleted after twelve months at the latest. Further information on data protection at Convert can be found at https://www.convert.com/privacy-policy/.

You have the right to object to the processing. You can prevent the evaluation by Convert by deleting existing cookies and deactivating the storage of cookies in your browser. In this case, you may not be able to use the website to its full extent. If you wish to prevent the further collection of your usage behaviour, you can exercise your right of objection by pressing the opt-out button under the following link: https://www.convert.com/opt-out/.

Usage-based online advertising

Facebook Custom Audiences

Furthermore, the website uses the "Website Custom Audiences" function via the so-called "Facebook Pixel" of Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum- [email protected], data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use this method. In this way, we pursue the interest of showing you advertisements that are of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding web page of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. In this case, we do not store any of your personal data. We have no knowledge of the storage period at Facebook and no possibility to influence it.

Deactivating the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

You can prevent the "Facebook Custom Audiences" function in various ways and thus exercise your right to object:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
  • by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies.

For more information on Facebook's processing, please visit https://www.facebook.com/about/privacy.

Facebook Analytics

For the use of Facebook Analytics, we use the so-called "tracking pixel" of Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: [email protected], data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook") to track your user behaviour. The information obtained through the tracking pixel cookie is used solely for statistical purposes, is transmitted to us anonymously by Facebook and does not provide any information about the person of the user. However, it will be linked to your Facebook account by Facebook in accordance with its privacy policy, stored and used for its own advertising purposes in accordance with Facebook's data use policy, and your data may also be transferred to Facebook's partners. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features.

The processing of your data in this case is based on Art. 6 para. 1 lit. f) DS-GVO. With the use of Facebook Analytics, we pursue the interest of being able to better evaluate our web offer and improve our service offer. In this case, we do not store any of your personal data. We have no knowledge of the storage period at Facebook and no possibility to influence it.

Deactivation of the "Facebook Analytics" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ in order to exercise the right to object. You can prevent the "Facebook Analytics" function in various ways and thus exercise your right to object:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving any third-party ads;
  • by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies,

For more information on Facebook's privacy policy, please refer to the related privacy policy at https://de-de.facebook.com/about/privacy/.

Google AdWords Conversion

We use the Google AdWords offer from Google to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of the ads or clicks by users. If you access our website via a Google ad, Google AdWords will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer will be able to recognise that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each AdWords customer. Cookies can therefore not be tracked via the websites of AdWords customers. We ourselves do not process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media, in particular, we cannot identify users from this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

You can prevent participation in this tracking procedure in various ways:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
  • by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies;
  • by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies;
  • by permanently deactivating them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

Google Remarketing

In addition to Adwords Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be processed by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

You can prevent participation in this tracking procedure in various ways and thus make use of your right to object:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
  • by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain

"www.googleadservices.com", https://www.google.de/settings/ads, with this setting being deleted when you delete your cookies;

Criteo

The website uses the online advertising service Criteo, with its registered office at 32 Rue Blanche, 75009 Paris. We do this in the interest of showing you advertising that may be of interest to you, in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners.

By visiting the website, Criteo receives the information that you have visited our website. For this purpose, Criteo uses a web beacon to set a cookie on your computer. The data mentioned in the section "Access data" is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data processing and the storage period. Your data will also be transferred to the USA and processed there, whereby Criteo has stated that it complies with the data protection requirements for a third country transfer. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Criteo and no possibility to influence it. Further information on the purpose and scope of the processing as well as further information on your rights in this regard and setting options to protect your privacy can be found at: https://www.criteo.com/de/privacy/.

You can object to the processing of your data by Criteo cookies. If you no longer wish to receive usage-based advertising and would like to prevent the further collection of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: https://www.criteo.com/de/privacy/.

Alternatively, you can opt-out of receiving interest-based ads from the providers that are part of the self-regulatory campaign "Youronlinechoices" by clicking on the link http://www.youronlinechoices.com/uk/your-ad-choices.

This setting will be deleted when you delete your cookies.

Adroll

The website uses the online advertising service Adroll with its registered office at Adroll Advertising Ltd, Level 6, 1 Burlington Plaza, Burlington Road, Dublin 4, Ireland. We do this in the interest of displaying advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose statistical information about you is collected, which is processed by our advertising partners. This enables us to target those internet users with advertising who have already shown interest in our services and products.

By visiting the website, Adroll receives the information that you have accessed our website. For this purpose, Adroll uses a web beacon to set a cookie on your computer. The data mentioned in the section "Access data" is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data processing and the storage period. Your data will also be transferred to the USA and processed there, whereby Adroll states that it complies with the data protection requirements for a third country transfer. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Adroll and no possibility of influencing it. Further information on the purpose and scope of processing as well as further information on your rights in this regard and setting options for protecting your privacy can be found at: https://www.adrollgroup.com/privacy. You can object to the processing of your data by Adroll cookies. If you no longer wish to receive usage-based advertising and would like to prevent the further collection of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: https://www.adrollgroup.com/privacy. Alternatively, you can opt-out of receiving interest-based ads from the providers that are part of the self-regulatory campaign "Youronlinechoices" by clicking on the link http://www.youronlinechoices.com/uk/your-ad-choices.

This setting will be deleted when you delete your cookies.

Outbrain

The website uses the online advertising service Outbrain, headquartered at 39 West, 13th Street, 3rd floor, New York, NY 10011, to display advertisements and recommendations that may be of interest to you in order to make our website more interesting for you. To this end, statistical information about you is collected and processed by our advertising partners. This enables us to target those internet users with advertising who have already shown an interest in our services and products.

By visiting the website, Outbrain receives the information that you have accessed our website. For this purpose, Outbrain uses a web beacon to set a cookie on your computer. The data mentioned in the section "Access data" is transmitted. Outbrain shortens your IP address before it is processed further We have no influence on the data collected, nor do we know the full extent of the data processing and the storage period. Your data will also be transferred to the USA and processed there, whereby Outbrain states that it complies with the data protection requirements for a third country transfer. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Outbrain and no possibility to influence it. Further information on the purpose and scope of the processing as well as further information on your rights in this regard and setting options for protecting your privacy can be found at: https://www.outbrain.com/legal/privacy#privacy-policy.

You can object to the processing of your data by Outbrain cookies. If you no longer wish to receive usage-based advertising and would like to prevent the further collection of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: https://www.outbrain.com/legal/privacy#privacy-policy.

Alternatively, they can by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "Youronlinechoices" via the link http://www.youronlinechoices.com/uk/your-ad-choices, whereby this setting is deleted when you delete your cookies.

LinkdIn Ads

Within our online offer, functions and contents of the service LinkedIn are integrated, offered by LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043 (hereinafter "LinkedIn").

This allows users of the website to be shown interest-based advertisements ("LinkedIn ads") when visiting the LinkedIn social network or other websites that also use this procedure. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection with the LinkedIn server. We have no influence on the scope and further processing of the data collected by LinkedIn through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of LinkedIn ads, LinkedIn receives the information that you have accessed the corresponding web page of our website or clicked on an ad from us. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features. LinkedIn has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at LinkedIn and no possibility to influence it. Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy.

You can object to the processing in various ways:

Twitter Advertising

Within our online offer, functions and contents of the Twitter service are integrated, offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (hereinafter "Twitter").

This allows users of the website to be shown interest-based advertisements ("Twitter advertising") when visiting the Twitter social network or other websites that also use this procedure.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Twitter server. We have no influence on the scope and further processing of the data collected through the use of this tool by

Twitter and therefore inform you according to our state of knowledge: Through the integration of Twitter Advertising, Twitter receives the information that you have called up the corresponding website of our internet presence or clicked on an advertisement of ours. If you are registered with a Twitter service, Twitter can assign the visit to your account. Even if you are not registered with Twitter or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features. Twitter has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using Twitter advertising, we are pursuing the interest of being able to play out our advertisements in a more precise and personalised manner and to improve our range of services. In this case, we do not store any of your personal data. We have no knowledge of the storage period with Twitter and no possibility of influencing it. Further information on data protection at Twitter can be found at: https://twitter.com/privacy.

You can object to the processing in various ways:

  • by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers or
  • by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies.

Bing Ads

We use the Bing Ads conversion and tracking tool from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, "Microsoft") on our website.

In doing so, Microsoft stores a cookie on the user's computer in order to enable an analysis of the use of our online offer. The prerequisite for this is that the user has reached our website via an advertisement from Microsoft Bing Ads. In this way, Microsoft and we can recognise that someone has clicked on an ad, has been redirected to our online offer and has reached a previously determined target page. We only learn the total number of users who clicked on a Bing ad and were then redirected to the target page (conversions). No IP addresses are stored.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Microsoft server. We have no influence on the scope and further processing of the data initiated by the use of Bing Ads. Microsoft has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework)

and thereby offers a guarantee of compliance with European data protection law.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Microsoft and no possibility of influencing it. Further information on data protection at Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement.

You can object to the processing in various ways:

  • by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive ads from third-party providers, or
  • by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.

AWIN (formerly Digital Window)

This website uses tracking functions of the affiliate network AWIN AG, Eichhornstraße 3, 10785 Berlin formerly Digital Window, hereinafter "AWIN". AWIN uses cookies and collects and stores usage data in pseudonymous profiles. In doing so, we pursue the interest of showing you advertising that might be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners.

By visiting the website, AWIN receives the information that you have accessed our website. For this purpose, AWIN uses a web beacon to set a cookie on your computer. The data mentioned in the section "Access data" is transmitted. We have no influence on the data collected, nor are we aware of the full extent of the data processing and the storage period. Your data will also be transferred to the USA and processed there. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at AWIN and no possibility to influence it.

You can object to the processing of your data by AWIN cookies. You can deactivate tracking by our affiliated advertising and affiliate networks by setting an opt-out cookie at the following links: https://www.awin.com/de/rechtliches/cookieoptout. Alternatively, you can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Plug-ins of social networks

Plug-ins of social networks are integrated on our website. These are provided by the following providers:

https://policy.pinterest.com/de/privacy-policy.

  • WhatsApp (provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Data protection information at: https://www.whatsapp.com/legal/

The plug-ins are identified on our website by the above-mentioned lettering or by small stylised symbols.

We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in the section "Access data" is transmitted.

In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and processed there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.

We have no influence on the data collected and processing operations, nor are we aware of the full scope of data processing, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and processes these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website.

The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f) DSGVO. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. You can also prevent the creation of user profiles in various ways and thus exercise your right to object:

  • by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
  • by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts.

We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.

Social plugins from ShareThis

Our website uses so-called social plugins ("plugins") of the social network ShareThis, which is operated by ShareThis, Inc., 4005 Miranda Avenue Suite 100, Palo Alto, CA 94304-1227 USA ("ShareThis"). The plugins are recognisable, for example, by buttons with a white arrow on a green background. You can find an overview of the ShareThis plugins and their appearance here: http://www.sharethis.com/get-sharing-tools/.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the ShareThis servers. The content of the plugin is transmitted by ShareThis directly to your browser and integrated into the page. Through the integration, ShareThis receives the information that your browser has called up the corresponding page of our website and stores a cookie on your end device to identify your browser. This information (including your IP address) is transmitted by your browser directly to a ShareThis server in the USA and stored there. ShareThis has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

ShareThis uses the data to create pseudonymised user profiles, which serve as a basis for personalised and interest-based advertising targeting of visitors to websites with StareThis plugins. For the purpose and scope of the data collection and the further processing and use of the data by ShareThis, please refer to the data protection information of StareThis: http://www.sharethis.com/privacy/.

The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f) DSGVO. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. You can also completely prevent the loading of the ShareThis plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

You have the right to object. If you no longer wish to receive usage-based advertisements and would like to prevent the further recording of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: http://www.sharethis.com/privacy/

Copyright © by Spirit Legal LLP