Privacy Policy

General information

Personal data

The subject of Privacy is personal data (hereinafter also referred to as data). This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as name, address, profession, e-mail address, state of health, income, marital status, genetic characteristics, telephone number and, where applicable, user data such as the IP address.

Person responsible

Rhine Munich Opco GmbH (hereinafter referred to as the operator or controller) is responsible for the processing of your personal data in the context of the use of the website https://www.mercure-hotel-muenchen-sued-messe.de (hereinafter referred to as the website).
The contact details are:

Rhine Munich Opco GmbH
Konrad-Adenauer-Ufer 5-7
50668 Cologne

Legal representation: Anders Braks
Tel: +49 221 973056-0
Fax: +49 221 973056-930
E-Mail: H1347@accor.com

Data Protection Officer

You can reach the Privacy Officer at datenschutz@eventhotels.com.

Possibility of objection

If you wish to object to the processing of your data by the operator in accordance with this Privacy Policy as a whole or for individual measures, you can do so using the contact details provided in the Legal Notice. Please note that in the event of such an objection, the use of the website and the retrieval of the services offered here may be restricted or not possible at all.

Scope and purposes of data processing, legal basis, provision of data and duration of storage

Accessing and using the website

Each time the website and its subpages are accessed, usage data is transmitted by the respective Internet browser and stored in log files (server log files). The stored data records contain the following data:

• Date and time of retrieval
• Name of the accessed subpage
• IP address
• Referrer URL (origin URL from which you came to the website)
• Amount of data transferred
• Product and version information of the browser used

The log files are evaluated by the operator in anonymized form in order to further improve the website and make it more user-friendly, to find and rectify errors more quickly and to control server capacities. For example, it is possible to see when the website is particularly popular and the operator can make the corresponding data volume available.
The permissibility of this processing is based on Art. 6 para. 1 f) GDPR. The legitimate interest of the operator lies in the provision of a website with information and the offering of services to its customers as well as the optimization of the website operation. The provision of the data is neither legally nor contractually required. Failure to provide the data means that the data cannot be used to optimize the website.
Your IP address will be deleted or anonymized after the end of use. In the case of anonymization, the IP addresses are changed in such a way that they can no longer be assigned to a specific or identifiable or identified or identifiable natural person, or only with a disproportionate amount of time, cost and manpower.

Contact form and e-mail on click

If you would like to contact the operator, a contact form is available for this purpose. You must provide the following information in this form:

• Name
• E-mail address
• Message

You can also provide the following voluntary information:

• Phone number
• Company address

On the website, you have the option of opening an e-mail addressed to the operator with just one click. The e-mail address that is linked to your e-mail program is automatically used as the sender. If you do not want your e-mail address to be retrieved in this way, you can change this in the settings of your respective e-mail program.
The permissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of the data is necessary because otherwise you will not be able to send the operator a message.
The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Advertising

The operator uses your data for advertising purposes. The permissibility of this processing is governed by Art. 6 (1) f) GDPR, according to which the processing is lawful if it is necessary to safeguard the legitimate interests of the controller or a third party and provided that the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not prevail. The use of data for advertising purposes constitutes a legitimate interest of the operator within the meaning of Art. 6 para. 1 f) GDPR. The operator relies on actively presenting its services to new and existing customers.
As a customer of the operator, you will also regularly receive recommendations by email based on the services you have already used. In this way, the operator would like to provide you with information about its services that may be of interest to you based on your last booking.
The legal basis for this is Art. 6 para. 1 f) GDPR in conjunction with Section 7 para. 3 UWG. § Section 7 (3) UWG.
The provision of the data is neither contractually nor legally required. Failure to provide the data means that you cannot be contacted for advertising purposes.
The personal data processed for advertising purposes will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

Newsletter

To receive further information about the operator’s services, you can also subscribe to an e-mail newsletter. The operator uses the rapidmail service of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany, to send the newsletter. The so-called double opt-in procedure is used to send the newsletter, i.e. you will only receive a newsletter by e-mail if you have previously expressly confirmed that the newsletter service should be activated. After you have activated the newsletter, you will receive a notification e-mail with an activation link. You will not receive the newsletter until you click on this link. You can deactivate the newsletter at any time. To do so, please contact the operator or use the unsubscribe link provided in each newsletter.
The permissibility of this processing is based on Art. 6 para. 1 a) GDPR, according to which processing is permissible if the data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes. The provision of your data is voluntary, but necessary for receiving the newsletter.
Your data will be deleted after you withdraw your consent, unless the controller has a legitimate interest in further storage. This may be the case if the operator must continue to store your data on the basis of a contract with you. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

Online conference request

You have the option of submitting a conference request via the website. The following personal data is required for this:

• Start
• End
• Number of participants
• Company address & contact details

You can also provide the following voluntary information:

• Type / name of the event
• Room required
• Catering
• Technology
• other wishes
• PDF Upload
• Name
• Telephone number

The permissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of the data is necessary because otherwise you will not be able to send the operator a conference request.
The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Online hotel booking

You have the option of booking overnight stays via the website. For this purpose, the operator uses the booking engine D-Edge, which is operated by D-Edge SAS, HQ 14/16, boulevard Poissonnière, 75009 Paris, France. To make a booking, you will be redirected to the D-Edge website. There you will be required to provide personal data such as your name, address and e-mail address as well as payment information. Further information can be found in D-Edge’s privacy policy https://www.d-edge.com/privacy-policy/.
The booking information is passed on to us by D-Edge for the execution of the contract.
The permissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of the data is necessary because otherwise you will not be able to make a reservation/booking.
The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

Voucher store

You can order accommodation, restaurant and value vouchers via the website in order to give them as a gift. The following personal data must be entered for this purpose:

• First name
• Surname
• Country
• Zip code
• Town/city
• E-mail address

In addition, you can voluntarily provide the following information:

• Telephone
• Company name
• Order note

The operator uses this personal data to process the voucher order. The permissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of the data is necessary, as otherwise you will not be able to order a voucher.
The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.
You can pay either directly by bank transfer after completing the order or directly via PayPal. If you pay via PayPal, you will be redirected to this provider. PayPal is a payment service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal uses the personal data you enter to carry out the payment process. Data may be transferred to countries outside the European Economic Area and to Switzerland. PayPal has adopted Binding Corporate Rules for this purpose, which you can find here https://www.paypal.com/de/webapps/mpp/ua/bcr?locale.x=de_DE. In all other respects, the data protection provisions of PayPal https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE apply.

Guest review

You can rate your stay at Mercure Hotel München Süd Messe online. For this purpose, the operator uses the rating service TrustYou, TrustYou GmbH, Steinerstraße 15, 81369 Munich. The ratings collected by TrustYou are published on the operator’s website.
The permissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the external presentation of the company via guest reviews.
The provision of data is neither required by law nor necessary for the conclusion of a contract. If you do not provide the data, you will not be able to submit a rating.
Further information can be found in TrustYou’s privacy policy https://analytics.trustyou.com/surveys/static/guest-privacy-policy-de.pdf.

Oaky

The operator uses the upselling tool Oaky of Oaky B.V., Leidseplein 1-3, 1017 PR, Amsterdam, Netherlands, on its website. With this tool, the operator can contact you and make you suitable offers for your current booking. These offers can then be added to the existing booking.

If necessary, the data may also be transferred to the USA. The transfer of your personal data to the USA takes place using standard data protection clauses in accordance with Art. 46 (2c) GDPR, which were issued by the European Commission in accordance with Art. 93 (2) GDPR. Information on the standard data protection clauses can be found on the website of the European Commission(https://ec.europa.eu/info/index_de).

The permissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in providing you with additional offers and booking options. The provision of the data is neither legally nor contractually required. No additional offers can be sent to you without the provision of this data.

The personal data processed for the aforementioned purposes will be deleted after the use of the Oaky service or if you object to the processing for advertising purposes, unless the operator has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

Further information on the processing of your personal data can be found in Oaky’s privacy policy https://oaky.com/en/security?page=privacy-policy.

straiv by Code2Order

The operator uses the straiv by CODE2ORDER service from CODE2ORDER GmbH, Eichwiesenring 4F, 70567 Stuttgart. This service enables the operator to provide you with a digital guest directory with information about your stay and other services and offers (e.g. wake-up call, room service, etc.). When using the service, personal data (e.g. IP address, data on your stay, etc.) is collected.

The permissibility of this processing is based on Art. 6 para. 1 f) GDPR, possibly in conjunction with Section 7 para. 3 UWG. Processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the provision of additional offers, services and information to you. The provision of the data is neither legally nor contractually required. No additional offers can be sent to you without the provision of the data.

As part of the service, it is also possible to receive push notifications about other offers.

The permissibility of this processing is based on Art. 6 para. 1 a) GDPR, according to which processing is permitted if the data subject has given consent to the processing of personal data concerning them for one or more specific purposes. The provision of the data is neither legally nor contractually required. Without the provision of data, it will not be possible to send you push notifications on the topics available and selected by you.

The personal data processed for the aforementioned purposes will be deleted after use of the service or after revocation of your consent, unless the operator has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored.

Content Delivery Network

The operator uses the content delivery network KeyCDN of the provider proinity LLC, Färberstrasse 9, 8832 Wollerau, Switzerland. KeyCDN is an online service that is used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. This shortens the loading time of the website. Certain cookies are required to enable this function.
The legal basis for the use of KeyCDN with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of further processing is also based on Art. 6 para. 1 a) GDPR (consent).
The provision of data is neither required by law nor necessary for the conclusion of a contract. Failure to provide it will result in the tool not being used.
The information processed by the cookies is transferred to the provider in Switzerland and stored there. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (in this case the existence of an adequacy decision by the European Commission).
The personal data collected in the context of the use of KeyCDN will be deleted unless the operator has a legitimate interest in further storage. In any case, only those data will continue to be stored that are absolutely necessary to achieve the corresponding purpose.
Further information on data processing by the provider can be found in KeyCDN’s Privacy Policy: https: //www.keycdn.com/privacy/.

Use of cookies

The operator uses so-called cookies. These are small data packets, usually consisting of letters and numbers, which are stored on a browser when you visit certain websites. Cookies allow the website to recognize your browser, to follow you as you browse through various sections of the website and to identify you when you return to the website. Cookies do not contain any data that identifies you personally, but the information about you stored by the operator can be assigned to the data obtained from and stored in the cookies.
Information that the operator obtains from you through the use of cookies can be used for the following purposes:

– Recognizing the user’s computer when visiting the website
– Tracking the user’s browsing activity on the website
– Improving the user-friendliness of the website
– Evaluating the use of the website
– Operating the website
– Preventing fraud and improving the security of the website
– Customizing the website to meet the user’s needs

Cookies do not cause any damage to a browser. They do not contain viruses and do not allow the operator to spy on you. Two types of cookies are used:

– Temporary cookies are automatically deleted when you close your browser (session cookies).
– Persistent cookies, on the other hand, have a longer lifespan. This type of cookie enables you to be recognized when you return to the website after leaving it. You can find more information in the cookie settings.

With the help of cookies, the operator is able to track your usage behavior for the above-mentioned purposes and to the corresponding extent. They are also intended to enable you to surf the operator’s website in an optimized manner. The operator also only collects this data in anonymized form.

The setting of cookies is permitted by law if the data processing that takes place serves the transmission of messages or the provision of a digital service (Section 25 (2) TDDDG). All other data processing by cookies is only permitted with your consent (Section 25 (1) TDDDG). Data processing takes place either automatically or the provision of your personal data is voluntary.

Cookie declaration

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Below you will find options for exercising your rights:

Change privacy settings
View the history of privacy settings
Revoking consent

You can also access these options via the fingerprint icon that is displayed on every page.

Use of tracking tools

Google Analytics

The operator uses the web analysis service Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This uses the cookies described above to collect, for example, information about your operating system, your browser, your IP address, the previously accessed website and the date and time of your visit to the operator’s website. The information generated by the cookies about the use of the website is transmitted to a Google server in Ireland and stored there. If necessary, the data may also be transferred to the USA. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses). You can find more information on this directly at Google: https://policies.google.com/privacy/frameworks?gl=de.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website operator and providing other services relating to website activity and internet usage. If this is required by law or if third parties process this data on behalf of Google, Google will also pass this information on to these third parties. This use is anonymized or pseudonymized. You can find more information about this directly at Google https://policies.google.com/privacy?hl=de.

In addition, the operator uses Google signals. This means that additional information about you is collected in Google Analytics if you have activated personalized ads (in particular interests and demographic data). In addition, ads can be delivered to you as a user in cross-device remarketing campaigns.

When Google Analytics is used, no direct personal data is stored, only the internet protocol address. This information is used to automatically recognize you the next time you visit the operator’s website and to make navigation easier for you.

The legal basis for the use of Google Analytics with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of the evaluation of the usage data is also based on Art. 6 para. 1 a) GDPR (consent).

You can change your cookie settings at any time. You can find the options for exercising your rights on this page under “Cookie declaration“.

The personal data collected as part of the use of tracking tools will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

The provision of data is neither legally nor contractually required. Google Analytics cannot be used without the provision of this data.

Google Ads

The operator uses the conversion tracking service Google Ads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads sets a cookie when you click on an advertisement, which recognizes which websites you visit. If you then reach the website of the advertisement, Google recognizes that you have reached this website via the advertisement and have made use of the service offered. The data is collected by Google Ireland and passed on to the operator as statistical evaluations. This enables the operator to recognize how attractive the advertisements are and to improve its offer.
If necessary, the data may also be transferred to servers in the USA. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly at Google: https://policies.google.com/privacy/frameworks?gl=de.

This use is anonymized or pseudonymized. You can find more information about this directly at Google https://policies.google.com/privacy?hl=de.

The legal basis for the use of Google Ads with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of the evaluation of the usage data is also based on Art. 6 para. 1 a) GDPR (consent).

You can change your cookie settings at any time. You can find the options for exercising your rights on this page under “Cookie declaration“.

The personal data collected as part of the use of tracking tools will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data is anonymized.
The provision of data is neither legally nor contractually required. Google Ads cannot be used without the provision of this data.

Google Marketing Platform

The operator uses the analysis service Google Marketing Platform (hereinafter GMP) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
GMP uses cookies that recognize which websites are visited and whether advertisements have already been displayed. This is intended to personalize the advertising and prevent advertisements from being displayed more than once.
The data is collected by Google Ireland and passed on to the operator as statistical evaluations. This enables the operator to recognize how attractive the advertisements are and to improve its offer.
If necessary, the data can also be transferred to servers in the USA. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses). Further information on this can be found directly at Google: https://policies.google.com/privacy/frameworks?gl=de.

This use is anonymized or pseudonymized. You can find more information about this directly at Google https://policies.google.com/privacy?hl=de.

The legal basis for the use of the Google Marketing Platform with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of the evaluation of the usage data is also based on Art. 6 para. 1 a) GDPR (consent).

You can change your cookie settings at any time. You can find the options for exercising your rights on this page under “Cookie declaration“.

The personal data collected as part of the use of tracking tools will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data is anonymized.
The provision of data is neither legally nor contractually required. GMP cannot be used without the provision of such data.

Triptease

The operator uses the Triptease analysis service of Triptease Ltd, Triptease Inc. and Triptease Pte Ltd, 15 Bishopsgate, London EC2N 4AF, United Kingdom, on the website. Triptease uses cookies to analyze surfing behavior on the website. The information collected is made available to the operator in anonymized form as part of statistical evaluations. If necessary, data from Triptease may also be transmitted to Google servers in the USA. The transfer of your personal data to the USA takes place using standard data protection clauses in accordance with Art. 46 (2c) GDPR, which were issued by the European Commission in accordance with Art. 93 (2) GDPR. Information on the standard data protection clauses can be found on the website of the European Commission ( https://ec.europa.eu/info/index_de). Further information can be found directly at Google https://policies.google.com/privacy/frameworks?gl=de.

Further information can be found in Triptease’s privacy policy https://www.triptease.com/en/privacy-policy/ and in their cookie policy https://www.triptease.com/en/cookie-policy/.

You can change your cookie settings at any time. You can find the options for exercising your rights on this page under “Cookie declaration”.

The personal data collected as part of the use of tracking tools will be deleted unless the controller has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. Where possible, personal data will be anonymized.

The provision of data is neither legally nor contractually required. Triptease cannot be used without the provision of this data.

Google Maps

The operator uses the map service Google Maps. This is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through its use, information on the use of the website (e.g. date and time of access, IP address, etc.) is transmitted to Google servers in Ireland and stored. If necessary, data may also be transferred to the USA. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses). You can find further information on this directly at Google: https://policies.google.com/privacy/frameworks?gl=de.

You can find more information on this directly at Google https://policies.google.com/privacy/frameworks?gl=de.

The data is used by Google for the purposes of advertising, market research and/or the needs-based design of its website. This may also involve a link to your user account if you are logged in there. If you do not wish this to happen, you must log out before using the website. Google’s terms of use and privacy policy apply. If you deactivate or block Java script in your browser settings, you can prevent Google Maps from running.
The operator uses Google Maps to enable you to use the interactive maps for route finding.

The legal basis for the use of Google Maps with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of the evaluation of the usage data is also based on Art. 6 para. 1 a) GDPR (consent).

You can change your cookie settings at any time. You can find the options for exercising your rights on this page under “Cookie declaration“.

Akismet

On the website, the operator uses the Akismet service of Automattic Inc, 60 29th Street 343, San Francisco, CA 94107, USA. This service sends comment information to a server in the USA in order to check whether the comments have actually been written or are spam. This is done in compliance with the special requirements of Art. 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses).
You can find further information on this in Automattic’s privacy policy https://automattic.com/privacy/.

The legal basis for the use of Akismet with regard to access to the end device is Section 25 (2) no. 2 TDDDG. The use for the security of the website (further processing) also constitutes a legitimate interest pursuant to Art. 6 para. 1 f) GDPR.

The operator does not store any personal data about the integration of Akismet. The personal data collected by Akismet will be deleted unless Automattic has a legitimate interest in further storage. In any case, only the data that is absolutely necessary to achieve the relevant purpose will continue to be stored. As far as possible, personal data is anonymized. The data is stored by Automattic in accordance with its own data protection regulations.

Popup Maker

We use Popupmaker to control pop-ups on our website. Popupmaker uses cookies to recognize you as a user and thus ensure that you are not shown pop-ups more than once. You can find more information on this at Popupmaker at https://wppopupmaker.com/privacy-policy/

The legal basis for the use of Popupmaker with regard to access to the end device is Section 25 (1) TDDDG (consent). The permissibility of further processing is also based on Art. 6 para. 1 a) GDPR (consent).

The cookie stores the data for one day unless there is a legitimate interest in further storage.

Social media buttons

Facebook

The operator uses a Facebook plugin on the website, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. If necessary, data may also be transferred to the USA. The transfer of your personal data to the USA takes place using standard data protection clauses in accordance with Art. 46 (2c) GDPR, which were issued by the European Commission in accordance with Art. 93 (2) GDPR. Information on the standard data protection clauses can be found on the website of the European Commission(https://ec.europa.eu/info/index_de). Further information can be found on Facebook at https://www.facebook.com/legal/EU_data_transfer_addendum and in Facebook’s privacy policy at https://de-de.facebook.com/privacy/explanation.

Instagram

Right of access, rectification, erasure, restriction, objection and data portability

Right to information (Art. 15 GDPR)

Upon request, the operator will provide you with information as to whether it is processing data relating to you. The operator will endeavor to process requests for information quickly.

Right to rectification (Art. 16 GDPR)

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR)

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds specified in Art. 17 (1) a) – f) GDPR applies.

Right to restriction (Art. 18 GDPR)

You have the right to request the operator to restrict processing if one of the requirements of Art. 18 (1) a) – d) GDPR is met.

Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 e) or f) GDPR; this also applies to profiling based on these provisions. The operator will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Please use the contact address provided in the Legal Notice to send us your message.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and the processing is carried out by automated means.

Revocation of your consent

If you have given your consent to the processing of your personal data and revoke it, the processing carried out up to the time of this revocation remains unaffected.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority at any time.

Receiver

The data collected when you access and use the website and the information you provide when you contact us will be transmitted to the operator’s server and stored there. Your data may also be passed on to the following categories of recipients:

• Persons at the controller who are involved in the processing (e.g. marketing department, personnel administration, customer service)
• Processors (e.g. data center, IT service provider, software support, provider of analysis tools, mailing services)
• Contractual partners of the operator (e.g. banks, tax consultants)

If one of the recipients is located in a third country, the operator shall comply with the principles of Art. 44 GDPR with regard to the permissibility of data transfer to a third country, in particular through data transfers based on adequacy decisions (e.g. the EU-U.S. Data Privacy Framework) or subject to appropriate safeguards such as standard contractual clauses.

Links to third party sites

When visiting the website, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party sites, nor can the operator control them. Such third-party sites are not subject to the operator’s data protection provisions.