Privacy Policy

General Information

Personal data

The subject of data protection is personal data (hereinafter also referred to as “data”). This includes all information relating to an identified or identifiable natural person. This includes, for example, details such as name, address, occupation, email address, health status, income, marital status, genetic characteristics, phone number, and, where applicable, user data such as the IP address.

Person in charge

The entity responsible for processing your personal data in connection with your use of the website mercure (hereinafter referred to as the “Website”) is Rhine Munich Opco GmbH (hereinafter referred to as the “Operator” or “Controller”).
The contact details are:

Rhine Munich Opco GmbH
Sedanstraße 13-17
50668 Cologne

Legal Representative: Anders Braks
Tel: +49 221 973056-0
Fax: +49 221 973056-930
Email: H1347@accor.com

Data Protection Officer

You can contact the Data Protection Officer at datenschutz@eventhotels.com.

Right to object

If you wish to object to the processing of your data by the operator in accordance with this Privacy Policy—either in general or with respect to specific measures—you may do so using the contact information provided in the Legal Notice. Please note that, in the event of such an objection, your use of the website and access to the services offered through it may be limited or may not be possible at all.

Scope and purposes of data processing, legal basis, provision of data, and duration of storage

Accessing and Using the Website

Every time the website and its subpages are accessed, usage data is transmitted by the respective web browser and stored in log files (server log files). The data records stored in this process contain the following information:

• Date and time of access
• Name of the subpage being accessed
• IP address
• Referrer URL (the URL from which you arrived at the website)
• Amount of data transferred
• Product and version information for the browser being used

The log files are analyzed by the operator in anonymized form to further improve the website and make it more user-friendly, to identify and resolve errors more quickly, and to manage server capacity. For example, this allows the operator to determine when the website is most heavily used and to allocate the appropriate data capacity accordingly.
The lawfulness of this processing is based on Art. 6(1)(f) of the GDPR. The operator’s legitimate interest lies in providing a website with information and offering services to its customers, as well as optimizing website operations. The provision of data is neither legally nor contractually required. Failure to provide the data means that it cannot be used to optimize the website.
Your IP address will be deleted or anonymized after you finish using the site. When anonymized, IP addresses are modified in such a way that they can no longer be attributed to a specific or identifiable natural person, or can only be attributed to such a person with a disproportionate amount of time, cost, and effort.

Contact form and email at a click

If you would like to contact the operator, a contact form is available for this purpose. When filling out this form, you must provide the following information:

• Name
• Email address
• Message

In addition, you may provide the following optional information:

• phone number
• Business address

On the website, you have the option to open an email addressed to the operator with just one click. In this case, the email address linked to your email program is automatically used as the sender. If you do not want your email address to be retrieved in this way, you can change this in the settings of your email program.
The lawfulness of this processing is based on Article 6(1)(b) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject’s request. The provision of the data is necessary because otherwise you would not be able to send a message to the operator.
The processed personal data will be deleted upon expiration of the statutory retention obligations, unless the controller has a legitimate interest in further retention. In any case, only those data that are strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Advertisement

The operator uses your data for advertising purposes. The lawfulness of this processing is based on Article 6(1)(f) of the GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The use of data for advertising purposes constitutes a legitimate interest of the operator within the meaning of Article 6(1)(f) of the GDPR. The operator relies on actively presenting its services to new and existing customers.
As a customer of the operator, you will also regularly receive recommendations via email based on the services you have already used. In this way, the operator would like to provide you with information about its services that may be of interest to you based on your most recent booking.
The legal basis for this is Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG).
The provision of data is neither contractually nor legally required. Failure to provide the data means that you cannot be contacted for advertising purposes.
Personal data processed for advertising purposes will be deleted unless the controller has a legitimate interest in further retention. In any case, only those data that are absolutely necessary to achieve the relevant purpose will continue to be stored.

Newsletter

To receive further information about the operator’s services, you can also subscribe to an email newsletter. The operator uses the rapidmail service provided by rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, to send the newsletter. The so-called double opt-in procedure is used to send the newsletter, meaning you will only receive a newsletter via email after you have explicitly confirmed that the newsletter service should be activated. After you have activated the newsletter, you will receive a confirmation email containing an activation link. You will only receive the newsletter after clicking this link. You can deactivate the newsletter at any time. To do so, please contact the operator or use the unsubscribe link provided in every newsletter.
The lawfulness of this processing is based on Art. 6(1)(a) of the GDPR, according to which processing is lawful if the data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes. The provision of your data is voluntary but necessary to receive the newsletter.
Your data will be deleted upon revocation of your consent, unless the controller has a legitimate interest in further retention. This may be the case if the operator is required to continue storing your data due to a contract with you. In any case, only those data that are strictly necessary to achieve the relevant purpose will continue to be stored.

Online Conference Request

You can submit a conference request through the website. To do so, you must provide the following personal information:

• Start
• End
• Number of participants
• Company Address & Contact Information

In addition, you may provide the following optional information:

• Type / Name of the event
• Room needed
• Catering
• Technology
• Other requests
• Upload PDF
• Name
• Phone number

The lawfulness of this processing is based on Article 6(1)(b) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject’s request. The provision of the data is necessary because, otherwise, you would not be able to submit a conference request to the operator.
The processed personal data will be deleted upon expiration of the statutory retention periods, unless the controller has a legitimate interest in further retention. In any case, only those data that are strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Online Hotel Booking

You can book accommodations through the website. To do so, the operator uses the D-Edge booking engine, which is operated by D-Edge SAS, HQ 14/16, boulevard Poissonnière, 75009 Paris, France. To complete your booking, you will be redirected to the D-Edge website. There, you will be required to provide personal data such as your name, address, and email address, as well as payment information. For further information, please refer to D-Edge’s privacy policy at https://www.d-edge.com/privacy-policy/.
The booking information is shared with us by D-Edge for the purpose of contract fulfillment.
The lawfulness of this processing is based on Article 6(1)(b) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject’s request. The provision of the data is necessary because otherwise you cannot make a reservation/booking.
The processed personal data will be deleted upon expiration of the statutory retention obligations, unless the controller has a legitimate interest in further retention. In any case, only those data that are strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Gift Card Store

You can order accommodation, dining, and gift certificates through the website to give as gifts. To do so, you must provide the following personal information:

• First name
• Last name
• Country
• Zip code
• Town/City
• Email address

In addition, you may voluntarily provide the following information:

• Phone
• Company name
• Order Note

The operator uses this personal data to process the gift card order. The lawfulness of this processing is based on Article 6(1)(b) of the GDPR, according to which processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject’s request. Providing the data is necessary because otherwise you cannot place a voucher order.
The processed personal data will be deleted after the statutory retention periods have expired, unless the controller has a legitimate interest in further retention. In any case, only those data that are absolutely necessary to achieve the respective purpose will continue to be stored. Where possible, the personal data will be anonymized.
You can make the payment either directly via bank transfer after completing the order or directly via PayPal. When paying via PayPal, you will be redirected to this provider. PayPal is a payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal uses the personal data you provide to process the payment. Data may be transferred to countries outside the European Economic Area and to Switzerland. For this purpose, PayPal has established Binding Corporate Rules, which you can find here: https://www.paypal.com/de/webapps/mpp/ua/bcr?locale.x=de_DE. In all other respects, PayPal’s privacy policy applies: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

Guest review

You can rate your stay at the Mercure München Süd Messe . To do so, the operator uses the review service TrustYou, provided by TrustYou GmbH, Steinerstraße 15, 81369 Munich. The reviews collected by TrustYou are published on the operator’s website.
The lawfulness of this processing is based on Article 6(1)(f) of the GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The operator’s legitimate interest lies in the company’s public image through guest reviews.
The provision of data is neither required by law nor necessary for the conclusion of a contract. Failure to provide the data means that you will not be able to submit a review.
For more information, please refer to TrustYou’s privacy policy at https://analytics.trustyou.com/surveys/static/guest-privacy-policy-de.pdf.

Oaky

The operator uses the Oaky upselling tool on its website, provided by Oaky B.V., Leidseplein 1-3, 1017 PR, Amsterdam, Netherlands. This tool allows the operator to contact you and make you offers tailored to your current booking. These offers can then be added to your existing booking.

If necessary, the data may also be transferred to the United States. The transfer of your personal data to the United States is carried out using standard data protection clauses pursuant to Article 46(2)(c) of the GDPR, which were adopted by the European Commission pursuant to Article 93(2) of the GDPR. You can find information on the standard data protection clauses on the European Commission’s website (https://ec.europa.eu/info/index_de).

The lawfulness of this processing is based on Article 6(1)(f) of the GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The operator’s legitimate interest lies in providing you with additional offers and booking options. The provision of the data is neither legally nor contractually required. Without the provision of this data, no additional offers can be sent to you.

Personal data processed for the aforementioned purpose will be deleted after you stop using the Oaky service or if you object to its processing for marketing purposes, unless the operator has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored.

For more information about the processing of your personal data, please see Oaky’s Privacy Policy at https://oaky.com/en/security?page=privacy-policy.

straiv by Code2Order

The operator uses the straiv by CODE2ORDER service provided by CODE2ORDER GmbH, Eichwiesenring 4F, 70567 Stuttgart. This service enables the operator to provide you with a digital guest folder containing information about your stay as well as additional services and offers (e.g., wake-up calls, room service, etc.). When using the service, personal data (e.g., IP address, stay details, etc.) is collected.

The lawfulness of this processing is based on Article 6(1)(f) of the GDPR, where applicable in conjunction with Section 7(3) of the German Unfair Competition Act (UWG). The processing is lawful if it is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, take precedence. The operator’s legitimate interest lies in providing you with additional offers, services, and information. The provision of the data is neither legally nor contractually required. Without the provision of this data, no additional offers can be sent to you.

The service also offers the option of receiving push notifications about additional offers.

The lawfulness of this processing is based on Article 6(1)(a) of the GDPR, which states that processing is lawful if the data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes. The provision of the data is not required by law or contract. Without this provision, we cannot send you push notifications regarding the available topics you have selected.

The personal data processed for the aforementioned purpose will be deleted after you have used the service or after you have withdrawn your consent, unless the operator has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored.

Content Delivery Network

The operator uses the KeyCDN content delivery network provided by proinity LLC, Färberstrasse 9, 8832 Wollerau, Switzerland. KeyCDN is an online service that enables the delivery of large media files (such as graphics, page content, or scripts) via a network of regionally distributed servers connected via the Internet. This reduces the website’s loading times. Certain cookies are necessary to enable this function.
The legal basis for the use of KeyCDN with regard to access to the end device is § 25(1) TDDDG (consent). The permissibility of further processing is further governed by Art. 6(1)(a) GDPR (consent).
The provision of data is neither required by law nor necessary for the conclusion of a contract. Failure to provide data results in the tool not being used.
The information processed by the cookies is transferred to the provider in Switzerland and stored there. This is done in compliance with the specific requirements of Art. 44 et seq. of the GDPR (in this case, the existence of an adequacy decision by the European Commission).
The personal data collected in connection with the use of KeyCDN is deleted unless the operator has a legitimate interest in further retention. In any case, only those data that are absolutely necessary to achieve the respective purpose will continue to be stored.
Further information on data processing by the provider can be found in KeyCDN’s privacy policy: https://www.keycdn.com/privacy/.

Use of Cookies

The operator uses cookies. These are small data packets, typically consisting of letters and numbers, that are stored in your browser when you visit certain websites. Cookies allow the website to recognize your browser, track your activity as you navigate through different sections of the site, and identify you when you return to the website. Cookies do not contain any data that personally identifies you, but the information about you stored by the operator can be linked to the data obtained from the cookies and stored within them.
Information that the operator obtains from you through the use of cookies may be used for the following purposes:

• Recognizing the user’s device when visiting the website
• Tracking the user’s browsing activity on the website
• Improving the user-friendliness of the website
• Analyzing the use of the website
• Operating the website
• Preventing fraud and improving the security of the website
• Customizing the website to meet users’ needs

Cookies do not cause any harm to your browser. They do not contain viruses and do not allow the website operator to spy on you. There are two types of cookies:

• Temporary cookies are automatically deleted when you close your browser (session cookies).
• Persistent cookies, on the other hand, have a longer lifespan. This type of cookie allows us to recognize you when you return to the website after leaving it. For more information, please see the cookie settings.

Cookies enable the operator to track your usage behavior for the purposes mentioned above and to the extent necessary. They are also intended to enhance your browsing experience on the operator’s website. The operator collects this data only in anonymized form.

The use of cookies is permitted by law if the data processing involved serves to transmit messages or provide a digital service (Section 25(2) TDDDG). Any further data processing via cookies is permitted only with your consent (Section 25(1) TDDDG). Data processing occurs either automatically or the provision of your personal data is voluntary.

Cookie Policy

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we use, as well as the related consents. For details on how “Real Cookie Banner” works, please visit https://devowl.io/de/rcb/datenverarbeitung.

The legal basis for the processing of personal data in this context is Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies and similar technologies used, as well as the related consents.

Providing personal data is neither required by contract nor necessary for entering into a contract. You are not obligated to provide personal data. If you do not provide personal data, we will not be able to manage your consents.

Below are the options available to you for exercising your rights:

Change privacy settings
View the history of privacy settings
Revoke consents

You can also access these options by tapping the fingerprint icon, which appears on every page.

Use of Tracking Tools

Google Analytics

The operator uses the web analytics service Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service uses the cookies described above to collect information such as your operating system, browser, IP address, the website you visited previously, and the date and time of your visit to the operator’s website. The information generated by the cookies regarding the use of the website is transmitted to a Google server in Ireland and stored there. If necessary, the data may also be transferred to the United States. This is done in compliance with the specific requirements of Articles 44 et seq. of the GDPR (either based on an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly on Google: https://policies.google.com/privacy/frameworks?gl=de.

Google will use this information to evaluate the use of the website, to compile reports on website activity for the operator, and to provide other services related to website and internet usage. If required by law or if third parties process this data on Google’s behalf, Google will also share this information with such third parties. This data is processed in an anonymized or pseudonymized form. You can find more information about this directly at Google: https://policies.google.com/privacy?hl=de.

In addition, the operator uses Google Signals. This allows Google Analytics to collect additional information about you, provided you have enabled personalized ads (specifically, interests and demographic data). Furthermore, ads may be served to you as a user in cross-device remarketing campaigns.

When using Google Analytics, no personal data is stored directly; only the IP address is recorded. This information is used to automatically recognize you the next time you visit the operator’s website and to make navigation easier for you.

The legal basis for the use of Google Analytics with regard to access to the end device is Section 25(1) of the TDDDG (consent). The permissibility of analyzing usage data is further governed by Article 6(1)(a) of the GDPR (consent).

You can change your cookie settings at any time. You can find information on how to exercise your rights on this page under“Cookie Policy.”

Personal data collected through the use of tracking tools will be deleted unless the controller has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

The provision of this data is not required by law or contract. Without this data, Google Analytics cannot be used.

Google Ads

The operator uses the Google Ads conversion tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click on an advertisement, Google Ads sets a cookie that tracks which websites you visit. If you then visit the website linked to the advertisement, Google recognizes that you arrived at that website via the advertisement and have used the service offered. The data is collected by Google Ireland and provided to the operator in the form of statistical analyses. This allows the operator to determine how effective the advertisements are and to improve their offerings.
If necessary, the data may also be transferred to servers in the United States. This is done in compliance with the specific requirements of Art. 44 et seq. of the GDPR (either based on an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly on Google: https://policies.google.com/privacy/frameworks?gl=de.

This data is used in an anonymous or pseudonymous form. For more information, please visit Google directly at https://policies.google.com/privacy?hl=de.

The legal basis for the use of Google Ads with regard to access to the end device is Section 25(1) of the TDDDG (consent). The permissibility of analyzing usage data is further governed by Article 6(1)(a) of the GDPR (consent).

You can change your cookie settings at any time. You can find information on how to exercise your rights on this page under“Cookie Policy.”

Personal data collected through the use of tracking tools will be deleted unless the data controller has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.
The provision of data is not required by law or contract. Without the provision of data, Google Ads cannot be used.

Google Marketing Platform

The operator uses the Google Marketing Platform (hereinafter GMP) analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
GMP uses cookies to track which web pages are visited and whether ads have already been displayed. This is intended to personalize advertising and prevent ads from being displayed multiple times.
The data is collected by Google Ireland and provided to the operator in the form of statistical analyses. This allows the operator to determine how effective the advertisements are and to improve its offerings.
If necessary, the data may also be transferred to servers in the United States. This is done in compliance with the specific requirements of Art. 44 et seq. of the GDPR (either based on an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly on Google: https://policies.google.com/privacy/frameworks?gl=de.

This data is used in an anonymous or pseudonymous form. For more information, please visit Google directly at https://policies.google.com/privacy?hl=de.

The legal basis for the use of the Google Marketing Platform with regard to access to the end device is Section 25(1) of the TDDDG (consent). The permissibility of analyzing usage data is further governed by Article 6(1)(a) of the GDPR (consent).

You can change your cookie settings at any time. You can find information on how to exercise your rights on this page under“Cookie Policy.”

Personal data collected through the use of tracking tools will be deleted unless the controller has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.
The provision of data is not required by law or contract. Without the provision of data, GMP cannot be used.

Triptease

The operator uses the Triptease analytics service on the website, provided by Triptease Ltd, Triptease Inc., and Triptease Pte Ltd., 15 Bishopsgate, London EC2N 4AF, United Kingdom. Triptease uses cookies to analyze browsing behavior on the website. The information collected in this process is made available to the operator in anonymized form for statistical analysis. In some cases, data from Triptease may also be transferred to Google servers in the United States. The transfer of your personal data to the United States is carried out using standard data protection clauses pursuant to Art. 46(2)(c) of the GDPR, which were adopted by the European Commission pursuant to Art. 93(2) of the GDPR. You can access information on the standard data protection clauses on the European Commission’s website (https://ec.europa.eu/info/index_de). Further information on this can be found directly on Google’s website at https://policies.google.com/privacy/frameworks?gl=de.

For more information, please refer to Triptease’s Privacy Policy at https://www.triptease.com/en/privacy-policy/ and its Cookie Policy at https://www.triptease.com/en/cookie-policy/.

You can change your cookie settings at any time. You can find information on how to exercise your rights on this page under “Cookie Policy.”

Personal data collected through the use of tracking tools will be deleted unless the controller has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Providing this data is not required by law or contract. Without this information, Triptease cannot be used. 

Google Maps

The operator uses the Google Maps service. This service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you use this service, information regarding your use of the website (such as the date and time of your visit, IP address, etc.) is transmitted to and stored on Google servers in Ireland. In some cases, data may also be transferred to the United States. This is done in compliance with the specific requirements of Articles 44 et seq. of the GDPR (either based on an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly on Google: https://policies.google.com/privacy/frameworks?gl=de.

For more information, visit Google directly at https://policies.google.com/privacy/frameworks?gl=de.

Google uses this data for advertising, market research, and/or to tailor its website to your needs. This may also involve linking the data to your user account if you are logged in. If you do not want this to happen, you must log out before using the site. Google’s Terms of Service and Privacy Policy apply. If you disable or block JavaScript in your browser settings, you can prevent Google Maps from running.
The operator uses Google Maps to enable you to use interactive maps for route planning.

The legal basis for the use of Google Maps with regard to access to the end device is Section 25(1) of the TDDDG (consent). The permissibility of analyzing usage data is further governed by Article 6(1)(a) of the GDPR (consent).

You can change your cookie settings at any time. You can find information on how to exercise your rights on this page under“Cookie Policy.”

Akismet

On this website, the operator uses the Akismet service provided by Automattic Inc., 60 29th Street 343, San Francisco, CA 94107, USA. This service sends comment data to a server in the United States to verify whether the comments are genuine or spam. This is done in compliance with the specific requirements of Articles 44 et seq. of the GDPR (either based on an adequacy decision by the European Commission or the use of standard data protection clauses).
Further information can be found in Automattic’s privacy policy at https://automattic.com/privacy/.

The legal basis for the use of Akismet with regard to access to the end device is Section 25(2)(2) of the TDDDG. Its use for website security (further processing) also constitutes a legitimate interest under Article 6(1)(f) of the GDPR.

The operator does not store any personal data through the integration of Akismet. The personal data collected by Akismet is deleted unless Automattic has a legitimate interest in retaining it. In any case, only the data that is strictly necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data is anonymized. The data is stored by Automattic in accordance with its own privacy policy.

Popup Maker

We use Popupmaker to manage pop-ups on our site. Popupmaker uses cookies to recognize you as a user and ensure that you do not see the same pop-ups multiple times. For more information, please visit Popupmaker at https://wppopupmaker.com/privacy-policy/

The legal basis for the use of Popupmaker with regard to access to the end device is Section 25(1) of the TDDDG (consent). The permissibility of further processing is also governed by Article 6(1)(a) of the GDPR (consent).

The cookie stores the data for one day unless there is a legitimate interest in retaining it longer.

Social Media Buttons

Facebook

The operator uses a Facebook plugin on the website, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In some cases, data may also be transferred to the United States. The transfer of your personal data to the United States is carried out using standard data protection clauses pursuant to Article 46(2)(c) of the GDPR, which were adopted by the European Commission pursuant to Article 93(2) of the GDPR. You can access information on the Standard Data Protection Clauses on the European Commission’s website (https://ec.europa.eu/info/index_de). Further information is available on Facebook at https://www.facebook.com/legal/EU_data_transfer_addendum and in Facebook’s Privacy Policy at https://de-de.facebook.com/privacy/explanation.

Instagram

Right of access, rectification, erasure, restriction, objection, and data portability

Right of access (Art. 15 GDPR)

Upon request, the operator will inform you whether it processes data concerning you. The operator will make every effort to respond to requests for information promptly.

Right to rectification (Art. 16 of the GDPR)

You have the right to request that the controller promptly correct any inaccurate personal data concerning you.

Right to erasure (Art. 17 of the GDPR)

You have the right to request that the controller delete your personal data without delay, and the controller is obligated to delete your personal data without delay if any of the grounds listed in Article 17(1)(a)–(f) of the GDPR apply.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request that the controller restrict processing if any of the conditions set forth in Article 18(1)(a) through (d) of the GDPR are met.

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. The controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
Please use the contact address provided in the legal notice for your communication.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR, Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means.

Withdrawal of Your Consent

If you have given consent to the processing of your personal data and subsequently withdraw that consent, the processing that took place prior to the withdrawal remains unaffected.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to file a complaint with a supervisory authority at any time.

Recipient

The data collected when you access and use the website, as well as the information you provide when contacting us, is transmitted to the operator’s server and stored there. In addition, your data may be disclosed to the following categories of recipients:

• Individuals within the controller’s organization who are involved in processing (e.g., marketing department, human resources, customer service)
• Data processors (e.g., data centers, IT service providers, software support providers, analytics tool providers, mailing services)
• The operator's contractual partners (e.g., banks, tax advisors)

If any of the recipients are located in a third country, the controller complies with the principles set forth in Article 44 of the GDPR regarding the lawfulness of data transfers to third countries, primarily through data transfers based on adequacy decisions (e.g., the EU-U.S. Data Privacy Framework) or subject to appropriate safeguards such as standard contractual clauses.

Links to third-party websites

When visiting the website, you may see content that links to third-party websites. The operator does not have access to or control over the cookies or other features used by third-party websites. Such third-party websites are not subject to the operator’s privacy policy.