Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal information when you visit this website.
Personal data is all data that can be used for personal identification.
Detailed information on data protection can be found in our data protection statement below this text.
Data collection on this website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator.
You can find the operator’s contact details in the “Information about the controller” section of this privacy statement.
How do we collect your data?
On the one hand, we collect your data when you provide it to us yourself.
This can be, for example, the data you enter in the contact form.
Other data is collected automatically by our IT systems or with your consent when you visit the website.
This is primarily technical data (e.g. internet browser, operating system or time of access to the page).
This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure that the website functions without errors.
Another part of the data can be used to analyze your behavior when using the site.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time, free of charge.
You also have the right to request correction or deletion of this data.
If you have given consent to data processing, you can revoke it at any time with effect for the future.
You have the right, under certain conditions, to request restriction of the processing of your personal data.
You also have the right to file a complaint with the competent supervisory authority.
You can contact us at any time if you have additional questions about data protection.
Analysis tools and third-party tools
When you visit this website, your surfing behavior may be statistically analyzed.
This is mainly done using so-called analysis programs.
You can find detailed information about these analysis programs in the following privacy statement.
2. Hosting and content delivery networks (CDN)
The content of our website is hosted by the following service provider:Raidboxes GmbH, headquartered in 48153 Münster.
External hosting
This website is hosted externally.
Personal data collected through this website is stored on the servers of the hosting provider.
This may include IP addresses, contact requests, metadata and communication data, contractual data, contact data, names, website accesses and other data generated through the website.
External hosting is carried out in order to fulfill the contract with our potential and existing users (Art. 6, Para. 1, Point b GDPR) and in the interest of secure, fast and efficient availability of our online offer through a professional service provider (Art. 6, Para. 1, Point f GDPR).
If appropriate consent has been requested, processing is carried out solely on the basis of Art. 6 Para. 1 Point a GDPR and Art. 25 Para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprint) within the meaning of the TTDSG.
Consent can be revoked at any time.
Our hosting provider processes your data only to the extent necessary to fulfill its obligations and in accordance with our instructions regarding that data.
Custom processing
For the use of the above services, we have concluded a data processing agreement (DPA).
This is a contract required by data protection laws that ensures that the personal data of visitors to our website is processed solely on our instructions and in accordance with the GDPR.
3. General notes and mandatory information
Data protection
The operators of this site take the protection of your personal data very seriously.
We process your personal data confidentially and in accordance with legal regulations on data protection and this privacy statement.
Various personal data is collected by using this website.
Personal data is information that can be used to personally identify you.
This privacy statement explains what information we collect and what we use it for.
It also explains how and for what purpose this is done.
Please note that data transmission over the Internet (e.g. communication via email) may have security vulnerabilities.
Complete protection of data from access by third parties is not possible.
Note on the responsible authority
The data controller on this website is:
Holiday Sun Studio Rooms Orebic
Coast Pomorac 20
20250 Orebic
Croatia
Miso Kojic
Phone: 00385 (0)20 – 13 199
Mobile: 00385 (0)91 550 7531
www.holiday-sun.com
info@holiday-sun.com
Storage duration
Unless a different storage period is stated in this privacy statement, your personal data will remain with us until the purpose of the processing no longer exists.
If you submit a justified request for deletion or withdraw your consent to data processing, your data will be deleted, unless there are legally permissible reasons for their continued storage (e.g. statutory retention periods under tax or commercial regulations); in which case, deletion will take place after these reasons cease to exist.
General information on the legal basis of data processing on this website
If you have given consent to the processing of data, we process your personal data on the basis of Art. 6, Para. 1, Point a of the GDPR or Art. 9, Para. 2, Point a of the GDPR, if special categories of data are processed pursuant to Art. 9, Para. 1 of the GDPR.
In the case of explicit consent for the transfer of personal data to third countries, the processing is also based on Article 49(1)(a) of the GDPR.
If you have given consent to the storage of cookies or access to information on your device (e.g. via device fingerprint), the processing is also based on Art. 25 Para. 1 TTDSG.
You can revoke your consent at any time.
If your data is necessary for the execution of the contract or for the implementation of pre-contractual measures, the processing is based on Art. 6, paragraph 1, point b of the GDPR.
In addition, we process data if it is necessary to fulfill a legal obligation based on Art. 6, paragraph 1, point c of the GDPR.
Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
Information on the relevant legal basis in each individual case can be found in the following paragraphs of this privacy statement.
Note on data transfer to the USA and other third countries
We use tools from companies based in the US or other third countries that are not secure under data protection laws.
If these tools are active, your personal data may be transferred to these countries and processed there.
Please note that these countries do not guarantee a level of data protection comparable to that in the EU.
For example, American companies are required to hand over personal data to security authorities without the possibility of legal protection for the individuals to whom the data relates.
It cannot therefore be ruled out that US authorities (e.g. intelligence services) process, analyze and permanently store your data on US servers for surveillance purposes.
We have no influence on these processing operations.
Revocation of your consent to data processing
Many data processing is possible only with your express consent.
You can revoke your consent at any time.
The lawfulness of the processing carried out until the revocation remains unchanged.
Right to object to data processing in specific cases and for direct marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6, PARAGRAPH 1, POINT (E) OR (F) OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON REASONS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS.
THE APPROPRIATE LEGAL BASIS FOR PROCESSING IS STATED IN THIS PRIVACY STATEMENT.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED, UNLESS WE CAN PROVE CREDIBLE LEGITIMATE REASONS FOR PROCESSING WHICH EXCEED YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES FOR SETTING, EXECUTING OR DEFENDING LEGAL REQUESTS (OBJECTION ACCORDING TO ART. 21, PAR. 1 GDPR-A).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THAT PURPOSE; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21, PARAGRAPH 2 OF THE GDPR).
Right to file a complaint with the competent supervisory authority
In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach.
The right to file a complaint does not affect other administrative or judicial remedies.
Right to data portability
You have the right to receive the data we automatically process based on your consent or for the performance of a contract in a common, machine-readable format.
If you request a direct transfer of data to another controller, this will only be carried out if technically feasible.
Information, deletion and correction
Within the framework of applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, their origin and recipients, and the purpose of the data processing, as well as the right to have this data corrected or deleted.
You can contact us at any time if you have additional questions about personal data.
4. Data collection on this website
Server log files
The site provider automatically collects and stores information in so-called server log files, which your browser automatically transfers.
This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Server request time
- IP address
This data is not merged with other data sources.
The data is collected on the basis of Article 6, Paragraph 1, Point f of the GDPR.
The website operator has a legitimate interest in the technically flawless display and optimization of its website – this requires the recording of server log files.
Contact form
If you send us an inquiry via the contact form, your information from the form, including the contact information you provided, will be stored for the purpose of processing the inquiry and any additional questions.
We will not share this information without your consent.
Data processing is based on Art. 6, paragraph 1, point b of the GDPR if your inquiry is related to the execution of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the efficient processing of requests (Art. 6 Para. 1 Point f GDPR) or on your consent (Art. 6 Para. 1 Point a GDPR) if requested; consent can be revoked at any time.
We will store the data you provide in the contact form until you request its deletion, revoke your consent for storage, or the purpose of storage no longer exists (e.g. after processing your inquiry).
Legal storage obligations – especially retention periods – remain unchanged.
Inquiries by email, phone or fax
If you contact us by email, telephone or fax, your data (name, inquiry) will be stored and processed to process your request.
We will not share this information without your consent.
Data processing is based on Art. 6, paragraph 1, point b of the GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the efficient processing of requests (Art. 6 Para. 1 Point f GDPR) or on your consent (Art. 6 Para. 1 Point a GDPR) if requested; consent can be revoked at any time.
The data you send us via inquiry will remain with us until you request its deletion, you revoke your consent to storage, or the purpose of storage no longer exists (e.g. after processing your request).
Legal storage obligations – especially legal deadlines – remain unchanged.
Consent via the Complianz system
Our website uses Complianz consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document them in accordance with data protection regulations.
The provider of this technology is Complianz BV, Kalmarweg 14-5, 9723 JG Groningen, The Netherlands (hereinafter referred to as “Complianz”).
Complianz is hosted on our servers, so no connection is made to the Complianz provider’s servers.
Complianz stores a cookie in your browser so that it can associate the consents given or their withdrawal with you.
Data collected in this way is stored until you request its deletion, you delete the Complianz cookie yourself, or the purpose of the storage no longer exists.
Legal storage obligations remain unchanged.
Complianz is used to obtain legally required consent for the use of cookies.
The legal basis for this is Art. 6, paragraph 1, point c of the GDPR.
5. Social networks
Elements of the social network Facebook are integrated on this website.
The provider of this service isMeta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
However, according to Facebook, the collected data is also transferred to the USA and other third countries.
You can find an overview of Facebook plugins here:https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the social element is active, a direct connection is established between your device and the Facebook server.
Facebook then receives information that you have visited this website with your IP address.
If you click the “Like” button while logged into your Facebook account, you can link the content of this page to your Facebook profile.
In this way, Facebook can associate your visit to this page with your user account.
Please note that as the provider of this site, we have no knowledge of the content of the transmitted data or its processing by Facebook.
You can find more information in Facebook’s privacy policy:https://de-de.facebook.com/privacy/explanation.
If consent is given, the use of the aforementioned service is based on Art. 6, Paragraph 1, Point a of the GDPR and Art. 25 of the TTDSG.
Consent can be revoked at any time.
If consent is not given, the service is used based on our legitimate interest for the widest possible visibility on social networks.
If personal data is collected through the tools described here and transmitted to Facebook, we andMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible for the processing of this data (Art. 26 GDPR).
Joint responsibility applies exclusively to the collection of data and its transmission to Facebook.
The processing carried out by Facebook after the transfer is not part of the joint responsibility.
Obligations arising from joint responsibility are defined in the joint processing agreement.
The text of the agreement is available here:https://www.facebook.com/legal/controller_addendum.
Under this agreement, we are responsible for providing information about data protection when using Facebook tools and for securely implementing the tools on our website in accordance with data protection laws.
Facebook is responsible for the data security of its products.
You can exercise your data subject rights (e.g. requests for information) regarding data processed by Facebook directly with Facebook.
If you exercise your rights with us, we are obliged to forward them to Facebook.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
- https://www.facebook.com/legal/EU_data_transfer_addendum
- https://de-de.facebook.com/help/566994660333381
- https://www.facebook.com/policy.php
The functions of the Instagram service are integrated on this website.
These functions are provided byMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the social element is active, a direct connection is established between your device and the Instagram server.
Instagram then receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this page to your Instagram profile by clicking on the Instagram button.
In this way, Instagram can associate your visit to this page with your user account.
Please note that as the provider of this site, we have no knowledge of the content of the transmitted data or its processing by Instagram.
If consent is given, the use of the aforementioned service is based on Art. 6, Paragraph 1, Point a of the GDPR and Art. 25 of the TTDSG.
Consent can be revoked at any time.
If consent is not given, the service is used based on our legitimate interest for the widest possible visibility on social networks.
If personal data is collected through the tools described here and forwarded to Facebook or Instagram, we andMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible for the processing of this data (Art. 26 GDPR).
Joint responsibility applies solely to the collection of data and its transmission to Facebook or Instagram.
The processing carried out by Facebook or Instagram after the transfer is not part of the joint responsibility.
Obligations arising from joint responsibility are defined in the joint processing agreement.
The text of the agreement is available here:https://www.facebook.com/legal/controller_addendum.
Under this agreement, we are responsible for providing information about data protection when using the Facebook or Instagram tools and for securely implementing the tools on our website in accordance with data protection laws.
Facebook is responsible for the data security of its products, including Instagram.
You can exercise your data subject rights (e.g. requests for information) regarding data processed by Facebook or Instagram directly with Facebook.
If you exercise your rights with us, we are obliged to forward them to Facebook.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
- https://www.facebook.com/legal/EU_data_transfer_addendum
- https://help.instagram.com/519522125107875
- https://de-de.facebook.com/help/566994660333381
More information is available in Instagram’s privacy policy:https://instagram.com/about/legal/privacy/
If you want, I can help you format all of this nicely for display on your website. Just give me a sign!
6. Analysis and advertising tools
Google Tag Manager
We use Google Tag Manager.
The service provider isGoogle Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking tools, statistics and other technologies on our website.
Google Tag Manager itself does not create user profiles, does not store cookies, and does not conduct independent analysis.
It is used exclusively for managing and displaying tools that are integrated through it.
However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
Google Tag Manager is used on the basis of Article 6(1)(f) of the GDPR.
The website operator has a legitimate interest in quickly and easily integrating and managing various tools on its website.
If appropriate consent has been requested, processing is carried out solely on the basis of Art. 6 Para. 1 Point a GDPR and Art. 25 Para. 1 TTDSG, if the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprint) within the meaning of the TTDSG.
Consent can be revoked at any time.
Google Analytics
This website uses the functions of the web analysis service Google Analytics.
The service provider isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows the website operator to analyze visitor behavior.
The operator receives various usage data, such as page views, duration of visits, operating systems used and the origin of the users.
This data is summarized into a user ID and assigned to the visitor’s corresponding device.
Google Analytics can also record your mouse movements, page scrolling, and clicks.
Data modeling and machine learning technologies are also used for analysis.
Google Analytics uses technologies that enable user recognition for behavioral analysis (e.g. cookies or device fingerprinting).
The information that Google collects about your use of this website is usually transmitted to a Google server in the USA and stored there.
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:https://privacy.google.com/businesses/controllerterms/mccs/
Browser add-on
You can prevent the collection and processing of your data by Google by downloading and installing the browser add-on available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
More information about how Google Analytics processes user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
Custom processing
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics eCommerce Measurement
This website uses the “e-commerce measurement” function of Google Analytics.
With this function, the website operator can analyze customer behavior to improve their marketing campaigns.
Information such as orders placed, average order value, shipping costs, and time from product review to purchase is recorded.
Google may summarize this information under the transaction ID assigned to the user or their device.
Google Ads
The website operator uses Google Ads.
Google Ads is a company’s online advertising program.Google Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows ads to be displayed in the Google search engine or on third-party websites when a user enters certain search terms (keyword targeting).
In addition, it is possible to display targeted ads based on user data available to Google (eg location and interest data) (target group targeting).
As a website operator, we can quantitatively analyze this data, for example, which search terms led to our ads being displayed and how many ads resulted in clicks.
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
- https://policies.google.com/privacy/frameworks
- https://privacy.google.com/businesses/controllerterms/mccs/
Google Ads Remarketing
This website uses Google Ads Remarketing functions.
The service provider isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to later show them interest-based ads within the Google advertising network (remarketing or retargeting).
In addition, target groups created through Google Ads Remarketing can be linked to Google’s cross-device functions.
In this way, personalized messages based on interests, tailored to your previous usage and browsing behavior on one device (e.g. mobile phone), can also be displayed on your other devices (e.g. tablet or computer).
If you have a Google account, you can object to personalized advertising at the following link:
https://www.google.com/settings/ads/onweb/
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
More information and data protection rules can be found in Google’s privacy policy:
https://policies.google.com/technologies/ads?hl=de
Forming target groups through user matching
Among other things, we use the “customer matching” function as part of Google Ads Remarketing to create target groups.
In this case, we forward certain user data (e.g. email addresses) from our user lists to Google.
If these users are also Google users and logged into their Google account, they will be shown appropriate advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).
Google Conversion Tracking
This website uses Google Conversion Tracking.
The service provider isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Conversion Tracking, Google and we can recognize whether a user has taken certain actions.
For example, we can analyze which buttons on our website are clicked how many times and which products are most frequently viewed or purchased.
This information is used to create conversion statistics.
We learn the total number of users who clicked on our ads and what actions they took.
We do not receive information that would lead us to the personal identification of the user.
Google uses cookies or similar recognition technologies for this purpose.
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
More information about Google Conversion Tracking can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de
Facebook Pixel
This website uses Facebook’s pixel to measure conversions.
The service provider isMeta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
According to Facebook, the collected data is also transferred to the USA and other third countries.
This makes it possible to track the behavior of site visitors after they have been redirected to the provider’s website by clicking on a Facebook ad.
In this way, the effectiveness of Facebook ads can be assessed for statistical and market research purposes and future advertising campaigns can be optimized.
The data we collect is anonymous to us as the operator of the website; we cannot deduce the user’s identity from them.
However, Facebook stores and processes the data and can link it to the user profile and use it for its own advertising purposes in accordance with Facebook’s data usage policies.
This allows Facebook to display ads on and off Facebook pages.
We have no influence on this data processing.
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
If personal data is collected through this tool and forwarded to Facebook, we andMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible for the processing of this data (Art. 26 GDPR).
Joint responsibility applies exclusively to the collection of data and its transmission to Facebook.
The processing carried out by Facebook after the transfer is not part of the joint responsibility.
Obligations arising from joint responsibility are defined in the joint processing agreement.
The text of the agreement is available here:
https://www.facebook.com/legal/controller_addendum
Under this agreement, we are responsible for providing information about data protection when using Facebook tools and for securely implementing the tools on our website in accordance with data protection laws.
Facebook is responsible for the data security of its products.
You can exercise your data subject rights (e.g. requests for information) regarding data processed by Facebook directly with Facebook.
If you exercise your rights with us, we are obliged to forward them to Facebook.
More information about privacy protection is available in Facebook’s privacy policy:
https://de-de.facebook.com/about/privacy/
You can deactivate the “Custom Audiences” remarketing function in the ad settings at:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
You must be logged in to Facebook for this.
If you do not have a Facebook account, you can opt out of usage-based advertising via the European Interactive Digital Advertising Alliance website:
http://www.youronlinechoices.com/de/praferenzmanagement/
Facebook Conversion API
We have integrated the Facebook Conversion API on this website.
The provider of this service isMeta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
However, according to Facebook, the collected data is also transferred to the USA and other third countries.
The Facebook Conversion API allows us to record website visitor interactions with our site and forward them to Facebook to improve the effectiveness of Facebook advertising.
In particular, the time of the call, the page visited, your IP address, user agent and, if applicable, other specific data (e.g. products purchased, cart value and currency) are recorded.
A full overview of the data that can be collected is available here:
https://developers.facebook.com/docs/marketing-api/conversions-api/parameters
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
If personal data is collected through this tool and forwarded to Facebook, we andMeta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, we are jointly responsible for the processing of this data (Art. 26 GDPR).
Joint responsibility applies exclusively to the collection of data and its transmission to Facebook.
The processing carried out by Facebook after the transfer is not part of the joint responsibility.
Obligations arising from joint responsibility are defined in the joint processing agreement.
The text of the agreement is available here:
https://www.facebook.com/legal/controller_addendum
Under this agreement, we are responsible for providing information about data protection when using Facebook tools and for securely implementing the tools on our website in accordance with data protection laws.
Facebook is responsible for the data security of its products.
You can exercise your data subject rights (e.g. requests for information) regarding data processed by Facebook directly with Facebook.
If you exercise your rights with us, we are obliged to forward them to Facebook.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
More information about privacy protection is available in Facebook’s privacy policy:
https://de-de.facebook.com/about/privacy/
Custom processing
For the use of the above service, we have concluded a data processing agreement (DPA).
This is a contract required by data protection laws that ensures that the personal data of visitors to our website is processed solely on our instructions and in accordance with the GDPR.
Facebook Custom Audiences
We use Facebook Custom Audiences.
The provider of this service isMeta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
When you visit or use our websites and apps, use our free or paid offerings, upload data, or interact with our company’s Facebook content, we collect your personal information.
If you give us permission to use Facebook Custom Audiences, we pass this information to Facebook, which can use it to display relevant ads.
Your data can also be used to define target groups (lookalike audiences).
Facebook processes this data as our data processor.
Details can be found in the Facebook User Agreement:
https://www.facebook.com/legal/terms/customaudience
The use of this service is based on your consent pursuant to Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
https://www.facebook.com/legal/terms/customaudience
https://www.facebook.com/legal/terms/dataprocessing
7. Accessories and tools
YouTube with enhanced data protection
This website embeds videos from the YouTube platform.
The site operator isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced data protection mode.
According to YouTube, this method means that YouTube does not store information about visitors to this site before they watch a video.
However, the transfer of data to YouTube partners is not necessarily excluded in this way.
For example, YouTube establishes a connection with the Google DoubleClick network regardless of whether you are watching a video or not.
As soon as you start a YouTube video on this page, a connection is established to the YouTube servers.
This transmits information to YouTube about which page you visited.
If you are logged into your YouTube account, you allow YouTube to associate your surfing behavior with your personal profile.
You can prevent this by logging out of your YouTube account.
In addition, YouTube may store various cookies on your device or use similar recognition technologies (e.g. device fingerprint) after you start a video.
In this way, YouTube can obtain information about visitors to this site.
This information is used, among other things, for video statistics, improving the user experience, and preventing fraud attempts.
If necessary, after starting the video, additional data processing may be activated over which we have no influence.
The use of YouTube is based on the interest in an attractive presentation of our online offering, which constitutes a legitimate interest pursuant to Art. 6 Para. 1 Point f GDPR.
If consent is requested, processing is carried out solely on the basis of Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG, if the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprint).
Consent can be revoked at any time.
More information about data protection at YouTube is available in their privacy policy:
https://policies.google.com/privacy?hl=de
Google Fonts (locally hosted)
This site uses so-called Google Fonts, which are provided by Google for uniform display of fonts.
Google Fonts are installed locally.
No connection to Google servers.
More information about Google Fonts is available here:
https://developers.google.com/fonts/faq
https://policies.google.com/privacy?hl=de
Font Awesome (local hosting)
This page uses Font Awesome to display fonts uniformly.
Font Awesome is installed locally.
No connection is established to Fonticons, Inc. servers.
More information about Font Awesome is available in their privacy policy:
https://fontawesome.com/privacy
Google Maps
This site uses the Google Maps mapping service.
The service provider isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use Google Maps functions, it is necessary to store your IP address.
This information is usually transmitted to a Google server in the USA and stored there.
The operator of this site has no influence on this data transfer.
If Google Maps is activated, Google may use Google Fonts for consistent font display.
When calling Google Maps, your browser loads the necessary web fonts into the browser cache to display texts and fonts correctly.
The use of Google Maps is based on the interest in an attractive display of our online offer and easier finding of locations listed on the site, which constitutes a legitimate interest pursuant to Article 6(1)(f) of the GDPR.
If consent is requested, processing is carried out exclusively on the basis of Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
The transfer of data to the USA is based on the European Commission’s standard contractual clauses.
You can find details here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
More information about the processing of user data is available in Google’s privacy policy:
https://policies.google.com/privacy?hl=de
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website.
The service provider isGoogle Ireland Limited(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to verify whether the data on this page is entered by a person or an automated program.
For this purpose, reCAPTCHA analyzes the behavior of site visitors based on various characteristics.
The analysis starts automatically as soon as the visitor enters the site.
For analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the page, user’s mouse movements).
The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyzes take place completely in the background.
Site visitors are not informed that an analysis is being conducted.
The data is stored and analyzed on the basis of Article 6, Paragraph 1, Point f of the GDPR.
The site operator has a legitimate interest in protecting its website from abuse through automated spying and SPAM.
If consent is requested, processing is carried out exclusively on the basis of Art. 6, Para. 1, Point a of the GDPR and Art. 25, Para. 1 of the TTDSG.
Consent can be revoked at any time.
More information about Google reCAPTCHA is available in Google’s privacy policy and terms of use:
https://policies.google.com/privacy?hl=de
https://policies.google.com/terms?hl=de
