Wir informieren Sie zeitnah per Mail über den Gewinner.
§1 The responsible person and the data protection officer
(1) Name and address of the person responsible
The responsible person in the sense of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Allgäuer Berghof Reichert & Neusch GmbH
Alpe Eck 2
87544 Blaichach-Gunzesried
08321/806-0
info@allgaeuer-berghof.de
www.allgaeuer-berghof.de
(2) The Data Protection Officer of the person responsible is:
Akwiso
Dieter Grohmann
Beethovenstr. 23
87435 Kempten
info@akwiso.de
§2 Definitions
(1) The Privacy Policy is based on the terms used by the European legislator when the EU General Data Protection Regulation (hereinafter referred to as "GDPR") was adopted. The Privacy Policy should be easy to read and understand. To ensure this, the most important terms are explained below:
(2) Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
(3) Data subject means any identified or identifiable natural person whose personal data are processed by the person responsible.
(4) Processing means any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
(5) Profiling means any automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location of that natural person.
(6) Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the inclusion of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not attributed to an identified or identifiable natural person.
(7) The person responsible or person responsible for processing shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or by the law of the Member States, the person responsible or the specific criteria for his or her designation may be laid down by Union law or by the law of the Member States.
(8) Processor means any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the person responsible.
(9) Recipient means any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, public authorities which may receive personal data in the course of a specific investigation carried out pursuant to Union or national law shall not be considered as recipients.
(10) Third party shall mean any natural or legal person, public authority, agency or body other than the data subject, the person responsible, the processor and the persons who, under the direct authority of the person responsible or the processor, are authorized to process the personal data.
(11) Consent means any freely given specific and informed expression of the data subject's will in an informed and unequivocal manner, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
§3 Provision of the website and creation of Log files
(1) In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we automatically collect the following data and information from the computer system of the calling computer each time you access the website:
The data is stored in the log files of our server. This data is not stored together with other personal data of the user.
When using this general data, we do not draw any conclusions about the person concerned. The data is only evaluated statistically.
(2) The legal basis for the temporary storage of log files is Art. 6 para. 1 p. lit. f) GDPR.
(3) Temporary storage of the data by the system is necessary in order
These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR.
(4) The data will be deleted as soon as they are no longer required for the purpose - in this case at the end of the usage process.
In the case of storage of the data in log files, this is the case after 7 days at the latest. Storage beyond this period is possible. In this case the IP addresses are deleted or anonymized, so that an assignment of the calling client is no longer possible.
(5) The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website, which is why there is no possibility of objection.
§4 Use of Cookies
(1) This website uses so-called cookies. Cookies are small text files which, as soon as you visit a website, are sent from a web server to your browser and stored locally on your end device (PC, notebook, tablet, smartphone, etc.) and stored on your computer, providing the user (i.e. us) with certain information. Cookies do not cause any damage to the computer and do not contain viruses. Each cookie contains a characteristic string of characters (so-called cookie ID), which enables the browser to be uniquely identified when the website is called up again.
(2) When you call up our website, you will be informed about the use of cookies and your consent to the processing of the personal data used in this context will be obtained. In this context, reference is also made to this Privacy Policy.
(3) We use cookies to make our website more user-friendly. The purpose of using technically necessary cookies is to simplify the use of websites for you. On the other hand, some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. Cookies are used in particular to make the website more customer-friendly and safer, in particular to collect usage-related information, such as frequency of use and number of users of the pages and as well as behaviour patterns of page usage. The user data collected by technically necessary cookies is not used to create user profiles. Our cookies are used to make it easier for you to fill out forms, to make our multimedia content accessible to you, to send you information about our cookies and to transfer data to our booking system.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f) GDPR.
(4) We also use cookies on our website,
The purpose of using technically not necessary cookies is to improve the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus constantly optimize our offer. The advertising cookies enable us to integrate advertising according to your interests or to display them to you. The third-party cookies enable you to view our videos, display maps and establish connections with third-party sites. This information may also be used to automatically recognize you when you return to the website on the same device and to help you navigate the site.
The legal basis for the processing of personal data using cookies for analysis purposes, for advertising purposes and for third parties is, if consent is given, Art. 6 para. 1 lit. a) GDPR.
Permanent cookies remain stored even if the browser session is terminated and can be called up again when the user revisits the site. The cookies are stored on your computer and transmitted from there to our site. Therefore, you have full control over the use of cookies. If you do not want data collection via cookies, you can set your browser via the menu under "Settings" so that you are informed about the setting of cookies or you can generally exclude the setting of cookies or delete cookies individually. Please note, however, that if you deactivate cookies, the functionality of this website may be limited; session cookies will be deleted automatically after you leave the website.
§5 Request forms and e-mails
(1) On our website there is an inquiry form which can be used for electronic contact. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:
At the time the message is sent, the following data is also stored:
For the processing of the data, your consent will be obtained during the sending process and reference will be made to this Privacy Policy.
(2) You are welcome to contact us by e-mail. In this case the personal data transmitted with the e-mail will be stored. If the data is provided via communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel to answer your request. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.
(3) The legal basis for the processing of the data is for the answering of the inquiry Art. 6 para. 1 p. 1 lit. f) GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 p.1 letter f) GDPR. If voluntary data is provided, the legal basis is the consent pursuant to Art. 6 para. 1 lit. a) GDPR. If the request is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 p. 1 lit. b) GDPR.
(4) The processing of the personal data from the input mask serves us solely to process the contact. We will of course use the data from your e-mail inquiries exclusively for the purpose for which you provide us with the data when contacting us. The other personal data processed during the sending process serves to prevent misuse of the form and to ensure the security of our information technology systems. This is also in our legitimate interest.
(5) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. For personal data from the input mask of the form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been finally clarified. If the contact is aimed at the execution of a contract, the data will be deleted after expiry of the statutory (commercial or tax) storage periods required for this purpose.
(6) You have the possibility to revoke your consent to the processing of the voluntary data at any time. In such a case the conversation cannot be continued. Please contact the person responsible according to § 1.
§6 Newsletter
(1) If you purchase goods or services from us and enter your e-mail address, we may subsequently use it to send you a newsletter. In such a case, the newsletter serves exclusively for direct advertising for our own similar goods or services.
(2) Only your e-mail address and your last name are required for sending the newsletter.
(3) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis we link the data [log files] and the web beacons mentioned in § 3 with your e-mail address and an individual ID. The data is only collected pseudonymously, the IDs are not linked to your other personal data, a direct personal reference is excluded. The legal basis for tracking is Art. 6 para. 1 p. 1 lit. f) GDPR. These data are evaluated by our marketing service provider. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously.
(4) For sending the newsletter we use Dailypoint of the provider Toedt, Dr. Selk & Coll. GmbH, Augustenstr. 79, 80333 Munich, www.dailypoint.com. For this purpose, the previously described logged data (IP address, registration/confirmation time) and the e-mail address are stored for the purpose of sending and evaluating the newsletter and for optimizing our own services or for economic purposes. However, the newsletter service does not use the data to write to the recipient itself or pass them on to other third parties. Further information can be found at https://www.dailypoint.com/privacypolicy/.
(5) Furthermore, your data will be passed on to our marketing service provider for the purpose of evaluating the newsletter. This serves to evaluate whether and which contents of the newsletter are interesting, which are read more frequently etc.
(6) The information is stored as long as you have subscribed to the newsletter.
(7) The legal basis for sending the newsletter due to the customer relationship is Art. 7 para. 3 UWG. The use of the dispatch service provider Dailypoint, the performance of statistical surveys and analyses and the logging of the registration procedure are based on our legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR.
(8) The collection of the user's e-mail address is used to send the newsletter.
(9) The data will be deleted as soon as they are no longer required for the purpose of their collection. Your e-mail address and other personal data will therefore be stored for as long as the subscription to the newsletter is active.
(10) You can cancel the receipt of our newsletters at any time and thus revoke your consent by clicking on the "Unsubscribe newsletter" field in our newsletter binder or by sending us an e-mail to marketing@allgaeuer-berghof.de or a message to the contact details given in the imprint.
§7 SSL Encryption
Our website uses SSL encryption in case of transmission of confidential or personal data. This encryption is used, for example, for payment transactions and for inquiries to us via this website. In order to ensure that this encryption is actually active, it must be monitored by you. The status of the encryption is indicated by the browser line, which changes from "http://" to “https://” in the case of encryption. In the case of encryption, your data cannot be read by third parties. If the encryption is not active, please contact us confidentially via another contact option.
§8 Entries
(1) If you would like to book with us or purchase a voucher, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your booking/ order. Mandatory information necessary for the processing of the contracts is marked separately, further information is voluntary. The data will be entered into an input mask, transmitted to us and stored. The following data is collected in the context of the booking/ order:
(2) The data will only be passed on to third parties if the transfer is necessary for the purpose of processing the contract or for invoicing purposes or for the collection of the fee or if you have expressly consented to this. In this regard, we only pass on the data required in each case. The data recipients are
(3) The legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR. With regard to voluntary data, the legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a) GDPR.
(4) The mandatory data collected is necessary for the performance of the contract with the user (for the purpose of sending the goods and confirming the content of the contract). We therefore use the data to answer your inquiries, to process your order, to check creditworthiness or to collect a claim, if necessary, and for the purpose of technical administration of the web pages. The voluntary information is provided to prevent misuse and, if necessary, to solve criminal offences. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with information.
(5) The data will be deleted as soon as they are no longer required for the purpose of their collection. We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years after the execution of the contract. If a continuing obligation exists between us and the user, we will store the data for the entire duration of the contract and for ten years thereafter (see above). With regard to the voluntarily provided data, we will delete the data at the end of 2 years after the execution of the contract, unless another contract is concluded with the user during this time; in this case, the data will be deleted at the end of after 2 years after the execution of the last contract.
(6) If the data is necessary for the performance of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if there are no contractual or legal obligations that prevent a deletion. Otherwise, you are free to have the personal data provided during registration completely deleted from the data stock of the person responsible according to § 1. With regard to the voluntary data, you can at any time declare your revocation to the person responsible according to § 1. In this case the voluntary data will be deleted immediately.
§Article 9 Payment services
9.1 Credit card
(1) We have integrated credit card payment components on this website that enable cashless payment for products and services on the Internet.
The operating company is Concardis GmbH, Helfmann-Park 7, 65760 Eschborn, service@concardis.com, www.concardis.com.
(2) If you select "credit card" as payment option during the ordering process in our online store, your data will be automatically transmitted to the credit card company. By selecting this payment option, you consent to the transmission of personal data required for the processing of payments.
(3) In the case of purchase processing via credit card, you transmit your name, your credit card number, the check digit and the expiration date of the credit card to the credit card company. The credit card company then carries out the payment to us after technical verification.
(4) The transmission of the data is only intended to process the payment.
(5) Further information can be found at www.concardis.com/datenschutz.
§10 Passing on personal data to third parties
10.1 Links to external websites
This website contains links to external sites. We are responsible for our own content. We have no influence on the contents of external links and are therefore not responsible for them, in particular we do not adopt their contents as our own. If you are directed to an external site, the Privacy Policy provided there applies. If you notice any illegal activities or contents on this site, please feel free to inform us. In this case we will check the content and react accordingly (notice and take down procedure).
10.2 Rented server space
We would like to point out that we use a rented server space of the provider Host Europe GmbH, Hansestr. 111, 51149 Cologne, www.hosteurope.de. By visiting the website, the provider of the server space therefore receives various information. This information is automatically stored by him in so-called server log files (see § 3), which your browser automatically transmits. Further information about the data can be found in § 3.
10.3 Google Maps
On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. By visiting the website, Google receives the information that you have called up the corresponding subpage of our website.
We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to Google Maps. Only if you agree to the transfer and thereby activate it, Google will receive the information that you have called up the corresponding website of our online offer.
The following data is transmitted
This is done regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.
The legal basis for the processing of personal data is Art. 6 para. 1 lit. p.1 a) GDPR. The European Court of Justice considers the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data will be transferred to the USA.
Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on our website. If you do not wish to be associated with your profile on Google, you must log out before activating the button.
You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
The duration of the storage depends on the storage periods at Google.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's Privacy Policy. There you will also find further information on your rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
10.4 Embedding YouTube videos
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC. These are all embedded in "enhanced privacy mode," which means that no information about you as a user is transferred to YouTube unless you play the videos. Only when you play the videos the data specified in the following will be transferred. We have no influence on this data transfer. By visiting the website, YouTube receives the information that you have called up the corresponding subpage of our website. The following data is transmitted:
This is done regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.
The legal basis for the processing of personal data is Art. 6 para. 1 S.1 lit. a) GDPR. The European Court of Justice considers the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data is transferred to the USA.
The integration of the videos serves to make the website more descriptive for the user and to increase the website's search engine ranking on Google and to refer more specifically to our specially produced videos. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. This is also our legitimate interest.
If you do not wish to be associated with your profile on YouTube, you must log out before activating the button.
The duration of the storage depends on the storage periods on YouTube.
You have a right of objection to the creation of these user profiles, whereby you must contact YouTube or the person responsible, namely Google Ireland Ltd, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland, in order to exercise this right.
For more information about the purpose and extent of YouTube's data collection and processing, please see the YouTube Privacy Policy. You can also find more information about your rights and settings to protect your privacy there: https://www.google.de/intl/de/policies/privacy.
§ 11 Web analysis by Google Analytics
(1) On our website we use the service of Google LLC (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the surfing behaviour of our users. The software sets a cookie on your computer (for cookies see § 4). If individual pages of our website are called up, the following data is stored:
(2) The information generated by the cookie about the use of this website by the user is usually transferred to a Google server in the USA and stored there. This website uses Google Analytics with the extension "_anonymizeIp()". The software is set up in such a way that the IP addresses are not stored completely, but only in abbreviated form. In this way, it is no longer possible to assign the shortened IP address to the calling computer. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. However, the IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.
(3) The legal basis for the processing of personal data is the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data will be transferred to the USA.
(4) Google will use this information on our behalf to evaluate your use of the website and to compile reports on website activity. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.
(5) The data is deleted as soon as it is no longer required for our recording purposes. In our case this is after 38 months.
(6) The cookies used are stored on your computer and transmitted from there to our website. Already stored cookies can be deleted at any time. You have the possibility to revoke your consent to the processing of personal data at any time by preventing the storage of cookies through a corresponding setting in your browser software (deactivation or restriction); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The current link is: "http://tools.google.com/dlpage/gaoptout?hl=de."
(7) Alternatively, you can also object to the use of cookies on our site by checking the box that lights up. In this case, a so-called "opt-out cookie" will be installed in your browser on your computer, with the result that no more session data will be collected. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use. If you visit our website with your mobile device, you can also object to this use and deactivate Google Analytics by clicking on the following link: Deactivate Google Analytics. In this case, a cookie will be set in your browser, which tells Google to stop tracking.
(8) The responsible party is Google Ireland Ltd, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. For further information, please refer to the User Terms and Conditions at http://www.google.com/analytics/terms/de.html, to the Privacy Policy at http://www.google.com/intl/de/analytics/learn/privacy.htmlsowie, to the Privacy Policy at http://www.google.de/intl/de/policies/privacy.
§12 Google Adwords Conversion Tracking
(1) We use the Google Conversion Tracking service on our website to evaluate Google AdWords. It is an analysis service of Google LLC (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the surfing behaviour of our users. The software sets a cookie on your computer (for cookies see § 4), so-called "conversion cookie". If individual pages of our website are called up, information is stored by Google. The information generated by the cookie about the use of this website by the user is usually transferred to a Google server in the USA and stored there. If you visit certain pages of our website and the cookie has not expired, we and Google can recognize that the ad has been clicked and you have been redirected to our site.
(2) However, we ourselves do not receive any personal data.
(3) The information collected using the conversion cookie is used to generate statistics for us. This tells us the number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. By analysing the collected data, we are able to compile information about the use of our ads.
(4) The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data is transferred to the USA.
(5) The cookie loses its validity after 30 days. As we do not collect any data ourselves, we do not store them. If Google LLC collects data, we have no influence on the deletion periods.
(6) The cookies used are stored on your computer and transmitted by it to our site. You have the possibility to withdraw your consent to the processing of personal data at any time by preventing the storage of cookies through a corresponding setting in your browser software (deactivation or restriction); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
(7) The third party provider is responsible is Google LLC, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. For more information, please refer to the User Terms and Conditions at http://www.google.com/analytics/terms/de.html, the Data Protection Overview at http://www.google.com/intl/de/analytics/learn/privacy.htmlsowie, the Privacy Policy at http://www.google.de/intl/de/policies/privacy.
§ 13 GA Custom Audiences
(1) On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f) GDPR), we use the web analysis service GA Custom Audiences of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
(2) This technology will enable you to see targeted advertising from us on other external pages of the Google Partner Network, provided if you have already visited our website and online services. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is referred to as "remarketing". For these purposes, so-called "web beacons" are integrated into the website when calling up our and other websites on which Google marketing services are active. With their help, an individual cookie, i.e., a small file, is stored on the user's device (instead of cookies, comparable technologies can also be used). This file records which websites you have visited, what content you are interested in and which offers you have clicked on, as well as technical information on the browser and operating system, referring websites, visiting time and other information on the use of the online offer. This is also where our legitimate interests lie. The IP address is also recorded, whereby we inform you within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases it is transferred in full to a Google server in the USA and shortened there. The IP address will not be merged with your data within other Google offers. Google may also combine the above-mentioned information with information from other sources. If you subsequently visit other websites, the ads tailored to your interests can be displayed.
(3) The data is processed pseudonymously within the framework of Google marketing services, i.e., Google does not store and process e.g. the name or e-mail address, but the relevant data cookie-related within pseudonymous user profiles. From Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of whether the data is processed without this pseudonymization. The information collected about you by Google marketing services is transmitted to Google and stored on Google's servers in the USA. By storing the data pseudonymously, your interests as a user are adequately protected.
(4) The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an inadequate level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your data subject rights or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data will be transferred to the USA.
(5) Responsible is Google LLC, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. Further information on the use of data for marketing purposes by Google can be found on the overview page: https://www.google.com/policies/technologies/ads, the Privacy Policy of Google is available at https://www.google.com/policies/privacy.
(6) If you wish to object to interest-based advertising by Google marketing services, you can use the setting options provided by Google: http://www.google.com/ads/preferences. You can revoke your consent to the processing of your personal data at any time by preventing the storage of cookies through a corresponding setting in your browser software (deactivation or restriction); however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
§ 14 Facebook, Custom Audiences and Facebook Marketing Services (Tracking Pixel)
(1) Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.
(2) On the one hand, the Facebook pixel enables Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. The Facebook Pixel also enables us to track the effectiveness of Facebook Ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook Ad (so-called "conversion").
(3) The Facebook pixel is integrated directly by Facebook when you call up our websites and can store a so-called cookie, i.e. a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we send data to Facebook for comparison purposes, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
(4) Furthermore, when using the Facebook pixel, we use the additional function "extended matching" (here data such as telephone numbers, email addresses or Facebook IDs of users) to create target groups ("Custom Audiences" or "Look Alike Audiences") and send them to Facebook (encrypted). Further information on "extended matching": https://www.facebook.com/business/help/611774685654668.
(5) The legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an inadequate level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your data subject rights or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data is transferred to the USA.
(6) Also on the basis of your consent Art. 6 para. 1 lit. a) GDPR) we use the "Custom Audiences from File" procedure of the social network Facebook, Inc. In this case the email addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted. The upload is only used to determine recipients of our Facebook ads. We want to ensure that the ads are only displayed to users who have an interest in our information and services.
(7) The processing of the data by Facebook is carried out within the framework of Facebook's data use policy. Accordingly, general information on the display of Facebook Ads, in the Facebook Data Usage Policy: https://www.facebook.com/policy.php. Special information and details about the Facebook pixel and its functionality can be found in the Facebook help area: https://www.facebook.com/business/help/651294705016616.
(8) You have the possibility to withdraw your consent to the processing of personal data at any time by preventing the storage of cookies through a corresponding setting in your browser software (deactivation or restriction); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. To adjust the types of advertisements displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
§15 Google-Re/Marketing-Services
(1) On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR) we use the marketing and remarketing services (in short "Google Marketing Services") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").
(2) Google's marketing services allow us to better target advertisements for and on our website in order to present you only with ads that potentially match your interests. For example, if a user is shown ads for products that he or she has been interested in on other websites, this is referred to as "remarketing". For these purposes, a so-called "web beacon" is integrated into the website when calling up our and other websites on which Google marketing services are active. With their help, an individual cookie, i.e. a small file, is stored on your device (instead of cookies, comparable technologies can also be used). This file records which websites you have visited, what content you are interested in and which offers you have clicked on, as well as technical information on the browser and operating system, referring websites, visiting time and other information about the use of the online offer. Your IP address is also recorded. Within the scope of Google Analytics, we inform you that the IP address is shortened within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. The IP address will not be merged with your data within other Google offers. Google may also combine the above-mentioned information with information from other sources. If you subsequently visit other websites, the ads tailored to your interests can be displayed.
(3) User data is processed pseudonymously within the framework of Google marketing services, i.e. Google does not store and process e.g. the name or e-mail address, but the relevant data cookie-related within pseudonymous user profiles. From Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who that cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected about you by Google marketing services is transmitted to Google and stored on Google's servers in the USA. By storing the data under a pseudonym, your interests as a user are adequately protected.
(4) We may also use the "Google Tag Manager" to integrate and manage Google's analysis and marketing services into our website.
(5) The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data will be transferred to the USA.
(6) Responsible is Google LLC, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. Further information on the use of data for marketing purposes by Google can be found on the overview page: https://www.google.com/policies/technologies/ads, the Privacy Policy of Google is available at https://www.google.com/policies/privacy.
(7) If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences. You can revoke your consent to the processing of your personal data at any time by preventing the storage of cookies through a corresponding setting in your browser software (deactivation or restriction); however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
§16 Google DoubleClick
(1) This website uses Google DoubleClick. It is a service for the integration of advertisements of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. DoubleClick transfers data to the DoubleClick server with each impression, click or other activity. Each such data transfer triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie (see § 4 on cookies) and assigns a pseudonymous identification number (ID) to your browser to verify which ads have been shown in your browser and which ads have been viewed. The cookies enable Google and its partner websites, including us, to serve ads based on previous visits to our or other websites. Each time you visit one of our individual pages that has a DoubleClick component integrated, your browser is automatically prompted to send data to Google for the purposes of online advertising and commissions.
(2) Furthermore, the cookie ID enables DoubleClick to record conversions. For example, conversions are recorded if you have previously seen a DoubleClick ad and subsequently make a purchase on the advertiser's website using the same browser.
(3) The cookies do not collect any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact.
(4) We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there. If you are logged in with your Google account, your data may be assigned to this account.
(5) The purpose of the cookie is the optimization and display of advertising that could be of interest to you, in order to make our website more interesting for you and to finance it. This can also be used to create reports on advertising campaigns or to improve them, as well as to avoid multiple displays of the same advertisement.
(6) The legal basis for the processing of your data is your consent in accordance with Art. 6 Paragraph 1 S. 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an inadequate level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your rights as a data subject or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data is transferred to the USA.
(7) You can prevent the installation of cookies from Google DoubleClick in various ways. You can revoke your consent to the processing of personal data at any time by deactivating or restricting the storage of cookies using the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent:
a) By adjusting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any advertisements from third-party providers; however, you may not be able to use all the functions of our website in this case.
b) By permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
(8) Responsible is Google LLC, Gordon House, 4 Barrow Street, Dublin, Ireland, Fax: +353 (1) 436 1001. For more information on the data protection conditions for advertising, please refer to http://www.google.de/intl/de/policies/privacy.
§17 Facebook Connect
(1) We offer you the opportunity to register on our website via your Facebook account.
(2) Facebook Connect is offered by Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Use of Facebook Connect is subject to Facebook's Privacy Policy and Terms of Use.
(3) When using Facebook Connect, Facebook profile data and public data on Facebook from your Facebook profile will be transferred to us. Conversely, data can be transferred from us to your Facebook profile.
(4) In doing so, name, profile picture, age, gender and list of friends are transferred to us. In return, Facebook receives data from us on the use of our portal. This data may be stored in the Facebook profile and published there within the network.
(5) The legal basis for the collection and processing of data is Art. 6 para. 1 lit. a) GDPR. The European Court of Justice regards the USA as a country with an insufficient level of data protection. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes without you having your data subject rights or other legal remedies. You can revoke your consent at any time by deleting your cookies in your settings. If you only accept the essential cookies, a transmission will not take place. With your consent in the cookie banner, you agree in accordance with Art. 49 Para. 1 S. 1 lit. a) GDPR that your data is transferred to the USA.
(6) The processing of data by Facebook takes place within the framework of Facebook's data use policy. Accordingly, general information on the display of Facebook ads, in the Facebook Data Usage Policy: https://www.facebook.com/about/privacy/your-info#public-info.
(7) The data is deleted as soon as it is no longer required for the purpose of its collection.
(8) In addition, you can revoke your consent to the use of the data at any time by notifying the person responsible in accordance with § 1 via e-mail or by post. In this case your data will be deleted immediately. With regard to the deletion of data on Facebook, you must write to the person responsible and request deletion.
§18 iiQ-check
(1) Our website offers the widget iiQ-Check of ConsultiiQ GmbH, Spitalstr. 1, 38640 Goslar, info@consultiiq.de, www.consultiiq.de. On iiQ-Check you can rate our hotel. With the installed widget we can integrate and present these ratings on our website. Furthermore, you can give your hotel rating directly on our website via this widget without having to go through an external site. The following data is collected for this purpose:
(2) The legal basis for this is Art. 6 para. 1 lit. f) GDPR concerning the integration of the widget and the ratings. Our legitimate interest lies in making our hotel ratings transparent. The legal basis for the submission of a rating is Art. 6 para. 1 lit. a) GDPR.
(3) You have the right to object to the use of your data at any time with effect for the future.
(4) Further information on data protection at Colsultiiq GmbH can be found at https://www.iiq-check.de/datenschutz.
§19 Vacancies
(1) We offer job advertisements on our website.
(2) You can send us your application documents by e-mail or by post. Within the scope of this, we process the information we receive from you and
(3) We do not carry out research about you on the Internet (so-called background checks).
(4) In the application process, we will not use any information from which racial or ethnic origin, political opinions, religious or ideological beliefs or trade union membership can be deduced, nor will we use genetic data, biometric data to unambiguously identify a natural person, health data or data on sexual life, sexual orientation, pregnancy or family planning, age or gender. We ask you not to send us any such information in advance.
Exceptions to this rule are information about your gender and possible severe disabilities. This information is necessary for us to take and comply with the legal requirements for protective measures etc. However, you are under no circumstances obliged to provide us with such information.
(5) Your data will initially be processed exclusively for the purpose of carrying out the application procedure. If your application is successful, the data will become part of the personnel file and may be used to carry out and terminate the employment relationship. If we are currently unable to offer you employment, we will process your data in order to defend ourselves against possible legal claims, in particular due to an alleged disadvantage in the application procedure. As far as you receive cost reimbursements, the corresponding booking documents will be processed to fulfil the commercial and tax storage obligations. The legal basis for the data processing is therefore Art. 6 Para. 1 letter b) GDPR, insofar as the data processing serves to decide on the establishment of an employment relationship and insofar as the data are then included in the employment relationship. If the storage serves to secure claims, the legal basis is Art. 6 para. 1 lit. f) GDPR. A legitimate interest here is the receipt of evidence documents for possible defence. We process information and documents that are not required for the above-mentioned purposes on the basis of your implied consent in accordance with Art. 6 Para. 1 lit. a) GDPR, which you have given us by sending them to us.
(6) We shall store the data required for the successful application and for the employment relationship until the end of the employment relationship and for up to 3 years thereafter. We will continue to process the data relating to an application, in respect of which we had to decide to reject it, for a period of 6 months after dispatch of the rejection in order to safeguard our legitimate interests. If we are called upon in the course of a process, we will store the data until the process is completed. This also applies accordingly to data received voluntarily.
(7) With regard to the voluntarily provided data, you have a right of revocation, which you can exercise at any time vis-à-vis the person responsible pursuant to § 1.
§20 Rights of the data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible in accordance with § 1:
20.1 Right of access
(1) You may request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing is carried out, you may at any time request from the data controller free of charge information about the personal data stored about you and about the following information:
a) the purposes for which the personal data are processed
b) the categories of personal data which are processed;
c) the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed;
d) the planned duration of the storage of the personal data concerning you or, if it is not possible to give specific details, criteria for determining the duration of storage;
e) the existence of a right to rectification or erasure of personal data concerning you, a right to have the processing limited by the controller or a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) any available information as to the origin of the data, if the personal data are not collected from the data subject;
h) the existence of automated decision-making, including profiling, in accordance with Art. 22, paragraphs 1 and 4 DPA and, at least in these cases, meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.
(2) You have the right to request information as to whether the personal data concerning you are being transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DPA in connection with the transfer.
20.2 Right of rectification
You have the right to obtain from the person in charge, without delay, the rectification and/or integration, if the personal data processed concerning you is incorrect or incomplete.
20.3 Right to limit processing
(1) Under the following conditions, you may request the controller to immediately restrict the processing of personal data concerning you:
a) if you dispute the accuracy of the personal data concerning you for a period of time which enables the controller to verify the accuracy of the personal data
b) if the processing is unlawful and you object to the deletion of the personal data and instead demand the restriction of the use of the personal data;
c) the controller no longer needs the personal data for the purposes of the processing, but you need it for the purpose of asserting, exercising or defending legal claims; or
d) if you have lodged an objection to the processing in accordance with Art. 21 para. 1 DPA and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
(2) If the processing of personal data relating to you has been restricted, such data - apart from being stored - may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
20.4 Right to deletion
You may request the controller to delete the personal data relating to you without delay if one of the following reasons applies:
a) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed
b) you revoke your consent on which the processing was based pursuant to Art. 6 para. 1 letter a or Art. 9 para. 2 letter a GDPR, and there is no other legal basis for the processing.
c) You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR.
d) The personal data concerning you have been processed unlawfully.
e) the deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
f) the personal data concerning you have been collected in relation to information society services offered, in accordance with art. 8, paragraph 1 of the GDPR.
(2) If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested them to delete all links to this personal data or to make copies or replications of this personal data.
(3) The right of cancellation does not exist insofar as the processing is necessary
(a) to exercise the right to freedom of expression and information
(b) to comply with a legal obligation requiring processing under Union or national law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the field of public health pursuant to Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR;
d) for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
e) to assert, exercise or defend legal claims.
20.5 Right to information
If you have asserted the right to rectification, erasure or limitation of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification/erasure/limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the data controller.
20.6 Right to data transferability
(1) You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller, without interference from the controller to whom the personal data has been communicated, provided that
a) the processing is based on a consent pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and
(b) processing is carried out by means of automated procedures.
(2) In exercising this right, you also have the right to obtain that personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
(3) The right to data transferability shall not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In order to exercise the right to data transferability, the data subject may at any time contact the controller.
20.7 Right of objection
(1) You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out pursuant to Art. 6 paragraph 1 letter e or f GDPR; this also applies to profiling based on these provisions.
(2) The controller shall no longer process the personal data concerning you unless he can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
(3) Where personal data relating to you are processed for the purpose of direct marketing, you shall have the right to object, at any time, to the processing of personal data relating to you for the purpose of such marketing, including profiling, where it is linked to such direct marketing. If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
(4) You have the possibility to exercise your right of objection in relation to the use of information society services, notwithstanding Directive 2002/58/EG, by means of automated procedures involving technical specifications.
(5) In order to exercise the right of objection, the data subject may contact the controller directly.
20.8 Right to withdraw the declaration of consent under data protection law
You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation. You can contact the person responsible for this.
20.9 Right to automated decision in individual cases including profiling
(1) You have the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effect on you or which significantly affects you in a similar way. This shall not apply if the decision
a) is necessary for the conclusion or fulfillment of a contract between you and the person responsible
b) is authorised by Union law or the law of the Member States to which the person responsible is subject and that law provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
c) with your express consent.
(2) However, these decisions may not be based on special categories of personal data in accordance with Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect rights and freedoms and your legitimate interests.
(3) With regard to the cases referred to in (1) and (3), the data controller shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, which shall include at least the right to obtain the intervention of a person from the data controller, to present his or her own point of view and to challenge the decision.
(4) If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact the controller.
20.10 Right to appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and the results of the complaint, including the possibility of a legal remedy under Art. 78 GDPR.
§21 Changes to the privacy policy
We reserve the right to modify our privacy practices and this policy to reflect changes in relevant laws or regulations, as appropriate, or to better meet your needs. Any changes to our privacy practices will be posted here accordingly. Please note the current version date of the Privacy Policy.
