Updated: 18. February 2021
Privacy Policy as PDF

Data Privacy Statement

General information about the processing of your data

We are required by law to inform you about the processing of your personal data (hereinafter "data") when you use our website. We take the protection of your personal data very seriously. This data protection notice informs you about the details of the processing of your data and about your legal rights in this respect. For terms such as "personal data" or "processing", the legal definitions from Art. 4 DSGVO are authoritative. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding case law. We recommend that you read the data protection declaration from time to time and keep a printout or copy for your records.

Scope

The data protection declaration is gold-plated for all pages of https://www.aohostels.com/de/. You do not have to belong to any linked websites or Internet presences of others. Information on data processing that is taking place in our hostels on site can be found here.

Responsibility

Responsible for the processing of personal data within the scope of this privacy policy is:
a&o hostels Marketing GmbH
Adalbertrstaße 50, 10179 Berlin, Germany
[email protected]

Questions about data protection

If you have any questions on the subject of data protection with regard to our company or our website, you can contact our data protection officer:
Data Protection Officer
c/o a&o hostels Marketing GmbH
Adalbertstraße 50, 10179 Berlin, Germany
[email protected]

Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights in relation to personal data relating to you, which you can enforce against us:

  • Right of access: You can request information in accordance with Art. 15 DSGVO about your personal data that we process.
  • Right to rectification: If the information concerning you is not (or is no longer) accurate, you can request a rectification in accordance with Art. 16 of the GDPR. If your data is incomplete, you can request that it be completed.
  • Right to erasure: You can request the erasure of your personal data in accordance with Art. 17 DSGVO.
  • Right to restriction of processing: You have the right to request a restriction of your personal data in accordance with Art. 18 DSGVO.
  • Right to object to processing: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Art. 6 (1) p. 1 lit. e) or lit. f) DSGVO, in accordance with Art. 21 (1) DSGVO. In this case, we will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting and exercising legal claims or defending against legal claims (Art. 21 (1) DSGVO). In addition, you have the right to object at any time to the processing of personal data concerning you for the purposes of direct marketing in accordance with Article 21 (2) of the GDPR; this also applies to any profiling insofar as it is connected with such direct marketing. We draw your attention to the right to object in this data protection declaration in connection with the respective processing.
  • Right to withdraw your consent: If you have given your consent for processing, you have a right of withdrawal in accordance with Art. 7 (3) DSGVO.
  • Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format ("data portability") as well as the right to have this data transferred to another controller if the prerequisite of Art. 20 (1) lit. a, b DSGVO is met (Art. 20 DSGVO).

You can exercise your rights by notifying the contact details mentioned in the section "Responsible provider" or the data protection officer appointed by us.

If you believe that the processing of your personal data violates data protection law, you also have the right to complain to a data protection supervisory authority of your choice in accordance with Art. 77 DSGVO.

Use of our website

You are able to visit our websites without disclosing any information about your person. Only access data that are automatically transferred by your browser will then be collected. The access data include, in particular:

  • the IP address of the device used for access,
  • the date and time of access,
  • information about the used browser and the operating system,
  • online identifiers (for example device IDs, session IDs).

The temporary processing of this data is necessary to technically enable the course of a website visit and a delivery of the website to your end device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files does not take place. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. The access data is deleted after 120 minutes. After that, they are only indirectly available via the reconstruction of backup tapes (backups) to ensure our obligations to data security.

You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Cookies

In addition to the aforementioned access data, so-called cookies or similar technologies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the operating system and cannot execute programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis of website usage).

Technically necessary cookies

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

  • Language settings,
  • Articles in shopping cart and
  • Log-In-Information.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. By changing the settings in your internet browser, you can deactivate or restrict the processing by cookies. Cookies that have already been saved can be deleted at any time in the browser settings. You can also prevent the use of cookies by opening the browser you are using in "private mode".

Technically unnecessary cookies

We also use cookies on the website to display the content of our website more efficiently and quickly or to display messages to you in the browser for the purpose of using website functions. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in the more efficient and attractive design of the website. The technically unnecessary cookies are automatically deleted after a maximum duration of one month. Insofar as we integrate third-party cookies in our website, we will inform you of this separately below.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. By changing the settings in your internet browser, you can deactivate or restrict the processing by cookies. Cookies that have already been saved can be deleted at any time in the browser settings. You can also prevent the use of cookies by opening the browser you are using in "private mode".

Contacting our company

When contacting our company, e.g. by e-mail or via the contact form on the website, the personal data you provide will be processed by us in order to answer your enquiry. It is mandatory for the processing of enquiries via the contact form on the website to provide a name, your postcode, your place of residence and a valid e-mail address. At the time of sending the message to us, your IP address and the date and time of registration are also processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO or Art. 6 para. 1 p. 1 lit. b) DSGVO if the contact is aimed at concluding a contract. If the enquiry is aimed at the conclusion of a contract, the provision of your data is necessary and obligatory for the conclusion of a contract. If the data is not provided, it will not be possible to conclude or execute a contract in the form of contacting you or processing the enquiry. The processing of the personal data from the input mask is solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data is not passed on to third parties. We delete the data accrued in this context after the processing is no longer necessary - usually after the end of the communication - or restrict the processing, if necessary, to compliance with the existing legally mandatory retention obligations.

You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Processing for contractual purposes

>We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute the contract. After the purpose has been achieved (e.g. contract execution), the personal data will be blocked for further processing or deleted, unless we are authorised to process it further on the basis of consent granted by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of legitimate interests (e.g. retention for the enforcement of claims).

The transfer of your personal data to third parties takes place insofar as

  • it is necessary for the establishment, implementation or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider/shipping company for the processing of a contract with your person), (Art. 6 para. 1 p. 1 lit. b) DSGVO), or
  • a subcontractor or vicarious agent that we use exclusively in the context of providing the offers or services you have requested requires this data (unless you are expressly informed otherwise, such auxiliaries are only authorised to process the data to the extent that this is necessary for the provision of the offer or service), or
  • there is an enforceable official order (Art. 6 para. 1 p. 1 lit. c) DSGVO), or
  • there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or
  • we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or
  • the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) DSGVO), or
  • it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e) DSGVO), or
  • we can rely on our overriding legitimate interests or those of a third party for disclosure (Art. 6 para. 1 p. 1 lit. f) DSGVO).

Your personal data will not be passed on to other persons, companies or bodies unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 sentence 1 lit. a) DSGVO. In the context of this data protection information, we point out the respective recipients in relation to the respective processing operation.

Booking

When you book a hotel room, we collect your name and e-mail address. We transmit this data to the responsible operating company. You can find an overview of the operating companies here. If you wish to make a booking on our website, it is necessary and obligatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address, the duration of your stay and your e-mail address as well as all other information relevant to the booking. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. Optional details for booking additional services are possible (e.g. breakfast, early arrival, late departure, express check-in, packed lunch, buggy, parking space, pet, ticket for public transport, EYCA Card, Hamburg CARD day pass). The data provided will be stored in our booking system. We process your data to process the booking/order and for this purpose we will in particular forward payment data to the payment service provider selected by you or to our house bank as well as to the service providers specified by you in each case for the provision of the optional services. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your data is necessary and obligatory for the conclusion or execution of the contract. If you do not provide your data, it will not be possible to conclude and/or execute the contract. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL technology. We delete the data accruing in this context after storage is no longer necessary or restrict processing if there are legal obligations to retain data. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

As an alternative to entering your booking data with us, you can also register directly in our booking system using the data stored with one of the following payment service providers: PayPal - PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg and Amazon Payments - Amazon Payments Europe S.C.A. 5, Rue Plaetis - 2338 Luxembourg. When you use the corresponding login function, the payment service provider transmits personal data about you to us, in particular your surname, first name, address and e-mail address, as well as all other booking-relevant information, provided that you give the payment service providers further information. You will be forwarded directly to the payment process after logging in to the respective service provider. The processing of the data forwarded to us by the payment service provider is carried out for the purpose of processing the booking. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f) DSGVO, based on the legitimate interest in providing our guests with a simple and user-friendly login.

You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Voucher shop

If you would like to place an order in our voucher shop at https://shop.aohostels.com/, it is necessary and obligatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address and your e-mail address. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. In the case of non-provision, the conclusion of a contract by means of the voucher shop is not possible. In addition, we process the data you may have provided in the context of your message on the voucher. We process your data for order processing. For this purpose, we will in particular forward payment data to the payment service provider selected by you or to our house bank. We use the shopify ordering system (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, [email protected]) for the voucher shop in order to provide you with an optimal booking process. The processing of your order data takes place on the servers of Shopify International Limited in Ireland. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL technology. We delete the data accruing in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Three years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

Customer Account

If you have created a customer account and would like to use it on our website, you must register using the following information:

  • First and last name,
  • username,
  • e-mail address and
  • self-selected password
  • customer number,
  • Address.

Furthermore, your IP address as well as the date and time of registration are processed at the time of registration. We use the double opt-in procedure for registration. After you have submitted the data required for registration, you will receive an e-mail with an activation link. Only after the link has been activated by clicking on it will access to your customer account be created and registration successfully completed. For subsequent registrations (logins), the access data (user ID and password) selected by you during the first registration must be entered. If a confirmation of the transmitted link does not take place within 24 hours, we will block the information transmitted to us and delete it. Otherwise, your data will be deleted as soon as they are no longer required to achieve the purpose of their processing. This is the case for the data collected during the registration process when the registration on the website is cancelled or modified.

The following functions are available in the login area:

  • edit your profile data,
  • view orders/bookings you have made.

If you use the login area of the website, e.g. to edit your profile data or to view orders and bookings made, we also process the personal data required to initiate or fulfil the contract, in particular address data and information on the method of payment. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your data is necessary and obligatory for the conclusion or performance of the contract. If you do not provide your data, you will not be able to register or use the login area, i.e. it will not be possible to conclude and/or execute a contract. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were processed, or processing will be restricted if there are legal obligations to retain data. Due to mandatory commercial and tax regulations, we are obliged to retain your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations.

Legal enforcement / address determination / debt collection

In the event of non-payment, we reserve the right to forward the data provided with the order to a lawyer and/or external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) for the purpose of address determination and/or legal enforcement. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in fraud prevention and the avoidance of default risks. In addition, we may share your data to ensure the exercise of our rights, as well as the rights of our affiliated companies, our cooperation partners, our employees and/or the users of our website, and the processing is necessary to this extent. Under no circumstances will we sell or rent your data to third parties. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have a legitimate interest in processing for law enforcement. We delete the accruing data after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

You may object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsible provider".

Application procedure

We are pleased that you are interested in us and would like to apply or have applied for a position in our company. Therefore, we provide you below with information on the processing of your personal data in connection with the application on our website. We process the following data, which is necessary and mandatory for the online application process:

  • First name and surname.
  • E-mail address,
  • place of residence,
  • address and
  • other data that you have sent us in connection with your application.

Furthermore, at the time of submitting the online application, your IP address and the date and time of submitting the application form will be processed. The purpose of the processing is to check whether you are suitable for the position (or, if applicable, other open positions in our companies) and to ensure that the application procedure is carried out. The legal basis for processing your personal data in this application procedure is Art. 6 para. 1 p. 1 lit. b) DSGVO in conjunction with. § Section 26 (1) BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the application procedure has been completed, processing may take place on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) DSGVO. Our legitimate interest then consists of asserting or defending claims. Data of applicants will be deleted after 6 months in the event of rejection. If you have been awarded a position during the application process, the data from the applicant data system will be transferred to our personnel information system. After receiving your application, your applicant data will be viewed by the HR department. Suitable applications are then forwarded internally to the department heads for the respective open position. Then the further procedure is coordinated. In principle, only those persons in the company have access to your data who need it for the proper conduct of our application procedure.

You have the right to object to the processing of your data insofar as the processing is based on the legal basis pursuant to Art. 6 (1) sentence 1 lit. f) DSGVO. Your right to object exists on grounds arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

E-Mail-Marketing

Newsletter

You have the option of subscribing to our e-mail newsletter on the website, with which we will regularly inform you about the following content:

  • information about your stay and other travel-related offers,
  • information about current special offers,
  • information about our hostel and service offers,
  • Individual customer advice and birth greetings,
  • sending of catalogues and flyers,
  • questions about special and individual wishes,
  • overview of possible leisure activities and events at our hostels,
  • information on how to get to the hostel, e.g. how to get there by public transport,
  • customer satisfaction enquiries after your stay,
  • new offers for services of our products and services.

To receive the newsletter, you must provide your name or pseudonym and a valid e-mail address. Insofar as you can subscribe to other newsletters on our website (e.g. to receive job offers), you will receive further information on the newsletter content at the appropriate point. The registration for our e-mail newsletter takes place in a double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have provided, in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirmation link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation is not received within 24 hours, we block the information transmitted to us and delete it after one month at the latest. After your confirmation, we process the e-mail address and name/pseudonym of the recipient concerned for the purpose of sending you our e-mail newsletter. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. We delete this data when you terminate the newsletter subscription. We process the data until you exercise your revocation by unsubscribing from our newsletter.

You can revoke your consent to the processing of your e-mail address for the receipt of the newsletter at any time, either by sending a message to us (cf. the contact details in the section "Responsibility") or by clicking directly on the unsubscribe link contained in the newsletter. In this case, the lawfulness of the processing carried out based on the consent until the revocation is not affected by the revocation.

Furthermore, the following data are processed at the time of subscription:

  • IP address,
  • Date/time of your subscription to the newsletter and
  • Time of your confirmation of the confirm link.

We also process your IP address, the time of your newsletter registration and the time of your confirmation in order to document your newsletter registration and prevent misuse of your personal data. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interest in this processing is fraud prevention. We delete this data at the latest when the newsletter subscription ends.

In addition, we evaluate the opening/click rates of our newsletters when we send them. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files and are also embedded on our website. The processing takes place for the purpose of analysing the reading behaviour of our newsletters. In doing so, we record when you read our newsletters, which links you click on in them and infer the interests of our customers from this. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests in this processing consist of measuring the reach and creating statistical analyses of our newsletters as well as optimising our email advertising. The information is processed for as long as you are subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.

We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".

Email marketing service SendGrid

We use the email marketing service "SendGrid" of the company SendGrid Inc. (1801, California Street St, Denver, CO 80202, hereinafter: SendGrid). If you have registered for the newsletter, the data provided during registration will also be processed on the servers of "SendGrid" in the USA. "SendGrid" has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). You can view the certification at https://www.privacyshield.gov/participant?id=a2zt0000000TRktAAG. "SendGrid" processes the necessary data for sending and evaluating the newsletters on our behalf. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the "SendGrid" server when the newsletter is opened. Technical information, such as the browser used, the time of the page retrieval and the IP address, is processed during the retrieval. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. The evaluation serves to identify the reader habits and click and open rates of all recipients. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) DGSVO. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. You can find more information at https://sendgrid.com/policies/privacy/

processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".

Email marketing service Customer Alliance

We use the e-mail marketing service "Customer Alliance" of the provider CA Customer Alliance GmbH, Ullsteinstraße 130, Turm B, 12109 Berlin to conduct guest satisfaction surveys. Customer Alliance processes the necessary data for sending and evaluating the newsletters on our behalf. In the course of retrieving the newsletter, technical information such as the browser used, the time of retrieval and the IP address is processed. This information is processed for evaluation and for the technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on. This information is used to identify the reading habits as well as the opening and click rates of all recipients. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. You can find more information in the Customer Alliance privacy policy at: https://www.customer-alliance.com/de/datenschutzbestimmungen/.

We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".

Email marketing service Emarsys

We also use the e-mail marketing service of "Emarsys" (Emarsys Interactive Services GmbH, Stralauer Allee 6, 10245 Berlin, [email protected], hereinafter "Emarsys"). If you have registered for the newsletter, the data provided during registration will be processed on the servers of "Emarsys". The processing is carried out for the purpose of creating, sending and evaluating the newsletter. Technical information, such as your IP address, is processed. In addition, it is evaluated when and whether you open the newsletter and which links you click on. "Emarsys" processes the necessary data for sending and evaluating the newsletter. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the "Emarsys" server when you open the newsletter. As part of the retrieval, technical information such as the browser used, the time of the page retrieval and the IP address is processed. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked by the reader. Neither we nor "Emarsys" intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits, opening and click rates of all recipients. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in the measurement of reach, creation of statistical analyses as well as in the adaptation, optimization and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. For more information, please see the privacy policy of "Emarsys" at https://emarsys.com/de/datenschutzrichtlinie/.

We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the prime rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the "Responsible party" section.

Email marketing service MailChimp

We use the email marketing service "MailChimp" from the provider Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 303308, USA, hereinafter "MailChimp"). If you have registered for the newsletter, the data provided during registration will be processed on MailChimp's servers in the USA. MailChimp has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of the Rocket Science Group at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG. MailChimp processes this information for the purpose of sending and evaluating the newsletters. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. Technical information, such as the browser used, time of page retrieval and IP address, is collected during the retrieval process. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. Neither we nor MailChimp intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits of recipients in order to better adapt, optimise and control our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. Further information on data protection at MailChimp can be found at https://mailchimp.com/legal/privacy/.

We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".

Payment Service Provider (PSP) / Payment offerer

PayPal

On our website we offer you payment via "PayPal". The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal"). If you select payment via "PayPal", the payment data you enter will be transmitted to "PayPal" for the purpose of payment processing. The processing of your data to "PayPal" is based on Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute a contract with the payment method "PayPal". The data required for payment processing is transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations. Further information on data protection and the storage period at "PayPal" can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Credit card payment

For the purpose of payment processing, we pass on the payment data required for the credit card payment to the credit institution commissioned with the payment or to the payment and invoice service provider commissioned by us, if applicable. The processing is based on Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude a contract and/or execute a credit card payment. The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

SOFORT by Klarna

If you select the "SOFORT" payment method as part of your booking, we will forward the data you provide to Sofort GmbH (Theresienhöhe 12, 80339 Munich, Germany; hereinafter "SOFORT") for the purpose of processing the payment. "SOFORT" is a direct transfer procedure in which a transfer can already be filled in during the order process and executed in real time. For this purpose, you will be redirected to the website of the payment service provider "SOFORT". The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute the contract using the "SOFORT" payment method. The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations. Further information on the processing of your data by "SOFORT" can be found at .

Amazon Payments

On our website we offer you the payment via "Amazon Payments". If you select this payment method, the payment is processed via the payment service provider Amazon Payments UK Limited, 1 Principal Place, Worship Street, London EC2A 2FA (hereinafter referred to as "Amazon Payments"), to which we pass on your payment data provided during the booking process together with information about your booking for the purpose of processing the payment. The processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of the payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute the contract with the "Amazon Payments" payment method.

"Amazon Payments" creates a transaction confirmation based on the transmitted data and, if necessary, processes your data for the purpose of an identity and creditworthiness check. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The legitimate interests pursued here are to prevent fraud and misuse of data and to minimise the risk of insolvency. In the credit assessment, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a "scoring" value). "Amazon Payments bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a "scoring" value is carried out according to recognised scientific procedures. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations. Further information on the processing of your data by "Amazon Payments" can be found at https://pay.amazon.de/help/201751600.

You may object to the processing insofar as the processing is based on the legal basis of Art. 6 (1) p. 1 lit. f) DSGVO. Your right to object exists for reasons arising from your particular situation. You can exercise your right to object by notifying our contact details above.

BitPay

On our website we offer payment via "BitPay". The provider of this payment service is BitPay B.V., Stadsplateau 7 WTC office 7, 3521 AU, Utrecht, the Netherlands (hereinafter: "BitPay"). If you select payment via "BitPay", after entering your user name and password with BitPay, the corresponding payment data will be transmitted to "BitPay" for the purpose of payment processing. The processing of your data to "BitPay" is based on Art. 6 para. 1 p. 1 lit. b) DSGVO. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute a contract with the payment method "BitPay". The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations. Further information on data protection and the storage period at "BitPay" can be found at https://bitpay.com/about/privacy.

Hosting

We use external hosting services provided by Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, United States), which serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. For these purposes, all data - including the access data mentioned under the point "Use of our website" - which are necessary for the operation and use of our website are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using external hosting services, we pursue an efficient and secure provision of our web offer. In the process, your data is transmitted to the provider in the USA. "Cloudflare" has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and has thus committed itself to compliance with the European data protection standard: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active. Further information on data protection and the storage period at "Cloudflare" can be found at: https://www.cloudflare.com/de-de/privacypolicy/.

You can object to the processing. You have the right to object on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Content Delivery Networks

Cloudflare

In addition, we use the services of the Content Delivery Network ("CDN") of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, United States; hereinafter "Cloudfare") on our website for the purpose of faster retrieval and shortening the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. "Cloudflare" has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and has thus committed itself to compliance with the European data protection standard: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using "Cloudflare", we are pursuing the legitimate interest of faster retrievability and a more effective and improved presentation of our online offer. Further information on data protection and the storage period for "Cloudflare" can be found at:https://www.cloudflare.com/de-de/privacypolicy/.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

CloudFront

We also use the services of the CloudFront content delivery network ("CDN") from Amazon Web Services ("AWS", Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States) on our website. The purpose of the integration is the faster retrievability and the shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Amazon has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/eu-us-framework) and has thus committed itself to compliance with European data protection standards: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using the "CDN", we are pursuing the legitimate interest of faster retrievability and a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://aws.amazon.com/de/privacy/?nc1=f_pr.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Bootstrap CDN

We also use the Content Delivery Network functions of Bootstrap, a service of StackPath, LLC (2021 McKinney Avenue, Suite 1100 Dallas, Texas 75201) on our website. The purpose of the integration is the faster retrievability and shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Stackpath has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/eu-us-framework) and is thus committed to complying with European data protection standards. You can view Stackpath's certification at: Data Protection Standards Committed (https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active). The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using the "CDN", we pursue the legitimate interest of faster retrievability as well as a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://www.bootstrapcdn.com/privacy-policy/.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

JQuery CDN

We also use the Content Delivery Network functions of the jquery Foundation on our website, a service provided by Stackpath, LLC (2021 McKinney Ave, 1100 Dallas, TX 75201, USA). The purpose of the integration is the faster retrievability and shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Stackpath has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/eu-us-framework) and is thus committed to complying with European data protection standards. You can view Stackpath's certification at: Data Protection Standards Committed (https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active). The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using the "CDN", we pursue the legitimate interest of faster retrievability as well as a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://www.stackpath.com/legal/privacy-statement/.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Pingdom

We use the monitoring service Pingdom of SolarWinds Worldwird, LLC (7171 Southwest Parkway, Bldg 400, Austin, Texas, 78735, USA, +1-512-628-9300) on our website. The use of Pingdom enables us to obtain a representation of the availability of our websites and the loading behaviour of our users. For this purpose, your terminal device information, in particular your IP address, is processed. The legal basis for this is Art. 6 para. 1 p. 1 lit. a) DSGVO. SolarWinds also processes your data in the USA. For this reason, the company has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/eu-us-framework) and has thus committed itself to compliance with European data protection standards. You can view the certification at https://www.privacyshield.gov/participant?id=a2zt00000008R6bAAE&status=Active. Further information on data protection, in particular on the storage period, at SolarWinds can be found at: https://www.solarwinds.com/legal/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Push-Notifications

When you visit our website, we ask you whether you would like to receive push notifications (notifications in the web browser). For this purpose, we use the technology of the respective web browser. We use push notifications to keep you informed about news through the notifications. If you agree to receive push notifications, we will only collect your browser ID, but no other personal data or device information. If you reject push notifications in your browser, we do not collect any data; in this case, your web browser also prevents the messages from being sent. Data processing in the course of push notifications is carried out for the purpose of communicating with our users and marketing offers. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests lie in ensuring further forms of communication and displaying advertising for our offers. The storage period of your browser ID is a maximum of twenty-four months.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can object to receiving push notifications by deactivating the corresponding setting in your browser software.

Integration of third party content

Third-party content such as videos, maps or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third-party providers") are aware of the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore necessary for the presentation of this content. In the following, we inform you about the services of external providers currently used on our website, as well as about the respective processing in individual cases and about your existing objection options.

Google Web Fonts

We use so-called web fonts for the uniform display of fonts, which are provided by "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). When you call up a website, your browser loads the required web fonts from "Google" into your browser cache in order to display texts and fonts correctly and more quickly. For this purpose, the browser transmits your IP address to "Google" in order to establish the connection to the "Google" servers. In doing so, "Google" receives the information that our website has been accessed by you. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using "Google Web Fonts", we pursue the legitimate interest in a uniform and appealing presentation of our online offers. "Google" also processes your data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information on the purpose and scope of processing by "Google" and the storage period for "Google Web Fonts" can be found at https://developers.google.com/fonts/faq and in the privacy policy of "Google": https://policies.google.com/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Google Maps

This website uses the "Google Maps" service of "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) for the purpose of displaying maps or map sections and thus enables you to comfortably use the map function on the website. By visiting the website, "Google" receives the information that you have called up the corresponding sub-page of our website. In addition, some of the data mentioned in the section "Use of our website" and "Cookies" will be transmitted to "Google". This occurs regardless of whether "Google" provides a user account via which you are logged in or whether no user account exists. If you are logged into "Google", your data will be directly assigned to your account. If you do not want your data to be associated with your profile at "Google", you must log out before activating the button. "Google" stores your data as usage profiles and processes them independently of the existence of a user account with "Google" for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using "Google Maps", we pursue the legitimate interest of making our website more attractive and providing you with additional service. "Google" also processes your data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information on the purpose and scope of processing by the plug-in provider and the storage period for "Google Maps" can be found at https://policies.google.com/privacy?hl=de.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating, restricting, or deleting cookies in the settings of your browser software or by opening the browser you are using in "private mode".

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter: "reCAPTCHA") on our website. The provider of the service is "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). The purpose of "reCAPTCHA" is to check whether the data input on the website (e.g. in a contact form) is made by a human being or by an automated programme. For this purpose, "reCAPTCHA" analyses the behaviour of the visitor to the website on the basis of various characteristics. This analysis begins automatically as soon as the user accesses the website. For the purpose of the analysis, "reCAPTCHA" evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to "Google". "Google" also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The processing is based on Art. 6 para. 1 p. 1 lit. f) DSGVO. We have a legitimate interest in protecting our web offers from abusive automated spying and from unsolicited e-mail advertising (SPAM). You can find more information about "reCAPTCHA" and the storage period of the data in the privacy policy of "Google" https://policies.google.com/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

Google Tag Manager

We use the "Google Tag Manager" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on our website. "Google Tag Manager" is a solution that allows website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not itself collect any data from you. The tool triggers other tags, which in turn may collect data; we will inform you about this separately in this privacy policy. "Google Tag Manager" does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with "Google Tag Manager".

Google Translate

This website also uses the "Google Translate" service from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to translate words, sentences and between websites between German and other languages, thus enabling you to use the functions on our website conveniently. For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google also processes personal data in the USA and has therefore subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Google has thus committed itself to compliance with European data protection standards. You can view the certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The processing is based on Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interest lies in the attractive design of our website and the provision of services for our users. Further information on data protection at Google can be found at: https://policies.google.com/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".

YouTube-Videos

We use plug-ins of the video platform "YouTube.de" or "YouTube.com" on the website, a service of YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter "YouTube"), for which "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the responsible party within the meaning of data protection law. By processing data through the plug-ins, we pursue the purpose of integrating visual content ("videos") that we have published on "Youtube.de" or "Youtube.com" also on this website. The videos are all embedded in "extended data protection mode", i.e. no data about you as a user is transmitted to "YouTube" if you do not play the videos. While playing videos on our website, "YouTube" receives the information that you have accessed the corresponding sub-page of our website. In addition, some of the data mentioned in the section "Use of our website" is transmitted to "Google". This occurs regardless of whether "YouTube" provides a user account via which you are logged in or whether no user account exists. If you are logged in to "Google", your data will be directly assigned to your account. If you do not wish to have your data associated with your "YouTube" profile, you must log out before activating the button. "YouTube" stores your data as usage profiles and processes them independently of the existence of a user account with "Google" for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. With the processing, we pursue the legitimate interests of making our website more attractive and providing you with an additional service. "Google" also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. For more information on the purpose and scope of processing by "YouTube" and the storage period at "YouTube", please refer to the privacy policy at https://policies.google.com/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can prevent the processing in different ways: by deactivating cookies in the settings of your browser software or by opening the browser you are using in "private mode".

Services for statistics and analysis and marketing purposes

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised use of the website. The third-party providers use cookies to control their services (see the section "Cookies" above). In the following, we inform you about the services of external providers currently used on our website as well as about the respective processing in individual cases and about your existing options to object.

Consent-Management-Tool “consentmanager“

We have integrated the consent management tool "consentmanager" by Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden ([email protected]) on our website in order to request consent for the use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give or refuse your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, coverage measurement and personalised advertising. You can use "consentmanager" to give or refuse your consent for all functions or to give your consent for individual purposes or individual functions. The settings you have made can also be changed by you afterwards. The purpose of integrating "consentmanager" is to allow users of our website to decide whether to set cookies and similar functionalities and to offer them the option of changing settings already made in the course of further use of our website. In the course of using "consentmanager", personal data as well as information of the end devices used, such as the IP address, are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. c) or lit. f) DSGVO. By processing your data, we comply with our legal obligations (e.g. obligation to provide proof of consent). Our legitimate interests in processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. After two years after the user settings have been made, you will be asked again for your consent. The user settings made will then be stored again for this period.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating, restricting, or deleting cookies in the settings of your browser software or by opening the browser you are using in "private mode".

Google Analytics

In order to be able to optimally adapt our website to user interests, we use "Google Analytics", a web analysis service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). "Google Analytics" uses so-called "cookies" (see section "Cookies" above), which are stored on your terminal device. With the help of the cookies, "Google" processes the information generated about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of statistical analysis of website use. This website uses "Google Analytics" with the extension "anonymizeIp()". This means that IP addresses are processed in a shortened form to make it much more difficult to relate them to individuals. According to "Google", your IP address will be shortened beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a "Google" server in the USA and shortened there. Google" will process this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for us and - where we specifically indicate otherwise - providing us with other services relating to website activity. The IP address transmitted by your browser for these purposes will not be merged with other data from "Google". The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. Your data in connection with "Google Analytics" will be deleted after twenty-four months at the latest. For the exceptional cases in which your data is transferred to the USA, "Google" has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information on data protection at "Google" can be found at: http://www.google.de/intl/de/policies/privacy.

In combination with Google Analytics our website also uses the service “Google Optimize” provided by Google. We use this service in order to optimize the website, inter alia with A/B-testing. For this purpose, we may place a cookie on your computer.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out based on the consent until the revocation is not affected by the revocation.

Google Ads (Conversion)

We use the "Google Ads" offer from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to draw attention to our attractive offers on external websites with the help of advertising media (formerly known as "Google AdWords"). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. These advertising media are delivered by "Google" via so-called "Ad Servers". For this purpose, we use "Ad Server" cookies, which can be used to measure certain parameters for measuring reach, such as the display of ads or clicks by users. If you access our website via a "Google" ad, a cookie is stored by "Google Ads" on your end device. With the help of the cookies, "Google" processes the information generated by your terminal device about interactions with our advertising media (call-up of a specific Internet page or click on an advertising medium), the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited as well as the date and time of the server request, for the purpose of analysing and visualising the reach measurement of our advertisements. Due to the marketing tools used, your browser automatically establishes a direct connection with the "Google" server. If you are registered with a "Google" service, "Google" can assign the visit to your account. Even if you are not registered with "Google" or have not logged in, it is possible that the provider may obtain and process your IP address. We only receive statistical evaluations from "Google" to measure the success of our advertising material. "Google" processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) DSGVO. The storage period at "Google" is twenty-four months. Further information on data protection and the storage period at "Google" can be found at: https://policies.google.com/privacy.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Google Ads (Dynamic Remarketing)

We use the "Google Ads" tool with the "Dynamic Remarketing" function from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). This is a procedure with which we would like to address you again. The "Dynamic Remarketing" function enables us to recognise users of our website on other websites within the "Google" advertising network (in the "Google" search or on "YouTube", so-called "Google Ads" or on other websites) and present advertisements tailored to their interests. The advertisements may also relate to products and services that you have already viewed on our website. For this purpose, the interaction of users on our website is analysed, e.g. which offers the user was interested in, in order to be able to display targeted advertisements to users on other sites even after they have visited our website. If you visit our website, "Google Ads" will store a cookie on your terminal device. With the help of the cookies, "Google" processes the information generated by your terminal device about the use of our website and interactions with our website as well as the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of playing out personalised advertisements. A combination of the data collected in the context of "Google Ads" with data from other "Google" products does not take place. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO "Google" processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The storage period at "Google" is a maximum of twenty-four months. Further information on data protection and the storage period at "Google" can be found at https://policies.google.com/privacy.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Google DoubleClick

We continue to use the online marketing tool "DoubleClick" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on the website. "DoubleClick" uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. With the help of cookies (see the section "Cookies" above), "Google" records which ads are displayed in which browser and can thus prevent them from being displayed more than once. With the help of the cookies, "Google" processes the information generated by your terminal device about the use of our website and interactions with our website as well as the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of displaying personalised advertisements. This enables "Google" and its partner sites to display ads based on the previous visit to websites. In addition, "DoubleClick" can use the cookies to record so-called conversions that are related to ad requests. For example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase. Through the integration of "DoubleClick", "Google" receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a "Google" service, "Google" can assign the visit to your account. Even if you are not registered with "Google" or have not logged in, it is possible that the provider may obtain and store your IP address. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. "Google" processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of "Google" at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The storage period at "Google" is thirteen months. Further information on data protection and the storage period at "Google" can be found at: https://policies.google.com/privacy.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Mouseflow

This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you'd like to opt-out, you can do so at https://mouseflow.com/opt-out. If you'd like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at [email protected].

For more information, see Mouseflow’s Privacy Policy at http://mouseflow.com/privacy/.

For more information on Mouseflow and GDPR, visit https://mouseflow.com/gdpr/.

For more intormation on Mouseflow and CCPA visit https://mouseflow.com/ccpa.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Bing Ads

We use the marketing functions of "Bing Ads" of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, hereinafter "Microsoft") on our website. The online advertising service "Microsoft Ads" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" to serve ads that are relevant to users and to improve reports on the effectiveness of campaigns. Information stored on users' devices is also processed. With the help of "Microsoft Ads", users can be served interest-based advertisements in relation to search results in search engines from "Bing" and "Yahoo". The advertisements may also relate to products and services that users have already viewed on our website. For this purpose, the interaction of users on our website is analysed beforehand, e.g. which offers users are interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. If users visit our website, a "cookie" is stored by "Microsoft Ads" on the end device of users. With the help of "cookies" and "tracking pixels", "Microsoft" processes the information generated by users' end devices about the use of our website and interactions with our website as well as access data, in particular the IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of playing and analysing personalised advertisements. In addition, the online advertising service "Microsoft Ads" enables us to measure the reach of our advertisements and to allocate the success of an advertising medium. For this purpose, "Ad Server Cookies" are used, through which certain parameters for measuring reach, such as display of the ads, duration of viewing or clicks by users, can be measured. "Microsoft" processes the data in the USA and has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework), thereby offering a guarantee of compliance with European data protection law. You can view the certification of "Microsoft" at https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) DSGVO. The storage period for processing within the scope of "Bing Ads" is thirteen months. Further information on data protection at "Microsoft" can be found at: https://privacy.microsoft.com/de-de/privacystatement and https://about.ads.microsoft.com/de-de/ressourcen/richtlinien/privacy-policy.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Airship

We use the marketing functions of Airship on our website, a so-called customer engagement platform of the provider Urban Airship UK Ltd. (5 New Street Square, London, UK, EC4A 3TW, hereinafter: "Airship"), which enables us to centrally manage communication and interaction with our users, in particular via app, websites, SMS, emails and mobile wallets. With "Airship", we can carry out multi-channel campaigns on the basis of evaluated events as well as user attributes and thus ensure target group-specific and uniform marketing. "Airship" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" for the purpose of analysing user behaviour and registration events. With the help of "Airship", we can evaluate analysis-relevant data at user level, e.g. apps opened, user interactions made and products purchased, and use this data for target group-specific marketing. Information stored on users' end devices is also processed, e.g. when one of our websites was accessed and which elements users interact with. "Airship" processes information such as the time zone, browser information and other technical parameters for the purpose of statistical analysis and coverage measurement of our advertising campaigns. When using the "Airship" platform for e-mail or SMS communication, e-mail addresses and mobile phone numbers are also processed for the purpose of communication. The storage period is twenty-four months. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) DSGVO. Further information on data protection at "Airship" can be found at: https://www.airship.com/legal/privacy/.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Facebook Custom Audiences

Furthermore, the website uses the "Website Custom Audiences" function from "Facebook". The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, e-mail: [email protected]; hereinafter: "Facebook"). Via so-called web beacons such as the "Facebook pixel", information about your usage behaviour on our website is collected and processed by "Facebook". This enables users of the website and users of "Facebook" who belong to a comparable target group to be shown interest-related advertisements ("Facebook ads") when visiting the social network "Facebook". With the help of the "Facebook pixel" (small graphics that are also integrated on our website and that are automatically loaded when our website is called up and enable user behaviour to be tracked), your browser automatically establishes a direct connection with the "Facebook" server. By integrating the "Facebook Pixel", "Facebook" uses cookies to process information generated about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited, the "Facebook ID" and the date and time of the server request, for the purpose of playing out personalised advertisements. If you are registered with a "Facebook" service, "Facebook" can assign the collected information to your account. Even if you are not registered with "Facebook" or have not logged in, there is a possibility that the provider will learn and process your IP address and other identifying features. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) DSGVO. If "Facebook" processes the data in the USA, "Facebook" has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. The certification of "Facebook" can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. The storage period of the information in the Facebook cookies is three months. Further information on data protection and the storage period at "Facebook" can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Facebook Analytics

We use the online tool "Facebook Analytics" from "Facebook". The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, email: [email protected]; hereinafter: "Facebook"). For the use of "Facebook Analytics", we use the so-called "Facebook Pixel" to analyse the use of our website and internet presences, e.g. in social networks "Facebook" and "Instagram", the interactions made by users on our website and internet presences as well as the reach measurement of our advertisements. With the help of the "Facebook pixel" - small graphics that are also integrated on our website, are automatically loaded when our website is called up and allow user behaviour to be tracked - your browser automatically establishes a direct connection with the "Facebook" server. By integrating the "Facebook pixel", "Facebook" processes information generated by cookies about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited, the "Facebook ID" and the date and time of the server request, for the purpose of analysing our website and internet presence, analysing user interactions and measuring the reach of our advertisements. The information obtained with the help of the "Facebook pixel" is used solely for statistical purposes, is transmitted to us anonymously by "Facebook" as statistics and does not provide any information about the person of the user. If you are registered with a "Facebook" service, "Facebook" can assign the information collected to your account. Even if a user is not registered with "Facebook" or is not logged in, it is possible that "Facebook" will learn and process the IP address and other identifying features. The processing of your data is based on Art. 6 para. 1 p. 1 lit. f) DSGVO. Our legitimate interests in the processing lie in the statistical analysis of website use, the measurement of the reach of advertisements and the optimisation and improvement of our website. If "Facebook" processes the data in the USA, "Facebook" has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. The certification of "Facebook" can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. The storage period of the information in the Facebook cookies is three months. Further information on data protection and the storage period at "Facebook" can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Yandex Metrica

We also use the analysis tool Yandex Metrica from the provider Yandex LLC (Schipol Boulevard 165, 1118 BG Schipol). The web analytics service "Yandex" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" to track specific user behaviour on websites. Information stored on users' end devices is also processed. With the help of the tracking pixels embedded in websites and the cookies stored on users' end devices, Yandex processes the information generated about the use of our website by users' end devices - e.g. that a certain web page was called up - and access data for the purpose of statistical analysis of website use. The access data includes, in particular, the IP address, browser information, the website previously visited and the date and time of the server request. It is also possible to track how the mouse was moved, where it was clicked and how far it was scrolled. Randomly selected individual visits to our website are recorded. Logs are also created of user activity, page content, mouse movements, clicks, scrolling and keystroke activity of visitors. Through these logs, individual visits to our website can be randomly replayed to identify sources of technical error and to derive possible improvements to the user experience of our website. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit a) DSGVO. "Yandex" also processes your data in Russia. We have concluded so-called "standard contractual clauses" with "Yandex" in order to oblige "Yandex" to comply with an appropriate level of data protection. We will provide you with a copy of the agreement upon request. Further information on data protection, in particular on the storage period, can be found at https://metrica.yandex.com/about/info/gdpr.

Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.

Version: 1.2 / Updated: February 2021