Privacy Policy
Kürsten & Kürsten GbR is aware that the security of your private information is an important concern when you use our websites. We take the protection of your personal data very seriously. Therefore, we want you to know when we store which data and how we use it. We would therefore like to inform you about our data protection measures with this data protection declaration.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam mails.
1. name and address of the responsible person
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Kürsten & Kürsten GbR
Mittelstr. 15
53520 Harscheid
Germany
phone: 02695/9312930
email: info@luxapart-eifel.de
Website: www.luxapart-eifel.de/
1.1 Questions about data protection
If you have any questions about our privacy policy, please send an email to the following address: info@luxapart-eifel.de.
General information on data processing
2.1 Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.
2.2 Legal basis for the processing of personal data
Insofar as we obtain consent from the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
2.3 Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
3. provision of the website and creation of log files
3.1 Description and scope of data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected in this process:
1. information about the browser type and version used.
2. the operating system of the user
3. the Internet service provider of the user
4. the IP address of the user
5. date and time of access
6. websites from which the user's system accesses our website
7. websites that are accessed by the user's system via our website
The log files contain IP addresses or other data that allow an assignment to a user. This could be the case, for example, if the link to the website from which the user arrives at the website or the link to the website to which the user goes contains personal data. The data is also stored in the log files of our system. These data are not stored or linked with other personal data of the user.
3.2 Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f DSGVO.
3.3 Purpose of data processing
The temporary storage of the session ID by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the session identifier (ID) must remain stored for the duration of the session. This takes place in the form of the so-called session cookie.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. In the event of errors or attacks, this data helps to isolate the cause of the error. The data in the log files are automatically deleted by the hoster after approx. 2 months.
An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.
3.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after 60 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
3.5 Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
4. use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:
1. language settings
2. session ID
3. flags
The term marker stands for cookies that only contain values such as 1, 0, true or false. For example, a marker is used to remember the click on the OK button in the cookie banner only for the current visitor. Otherwise, the cookie banner would not be able to be clicked away. We also use cookies on our website that enable an analysis of the user's surfing behavior. In this way, the following data can be transmitted:
1. date
2. country from which the call comes
3. page called up
4. search terms entered
5. time spent on individual pages
6. use of website functions
The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data are not stored together with other personal data of the users or brought in connection.
When calling up our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to the data protection declaration. The data protection declaration also contains information on how the storage of cookies can be prevented in the browser settings or add-ons.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.
c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We require cookies for the following applications:
1. adoption of language settings
2. remembering deactivated dialogs
The user data collected by technically necessary cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.
These purposes are also our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.
It is possible for us on the basis of the various analysis parameters to identify pages that, for example, lead to an increased bounce rate. The subsequent page investigation can improve the individual page and thus also the user experience.
e) Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
5. registration or inquiries via contact forms
5.1 Description and scope of data processing
On our website, we offer users the opportunity to register or book a stay, request information material or offers by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected during the registration process:
At the time of registration or request, the following data is also stored:
Request for quotation
1. salutation
2. name
3. e-mail and telephone number
4. indication of the requested service
5. message
6. IP address of the user
7. date and time of the request
As part of the processing process, the user's consent to the processing of this data is obtained.
Legal basis for data processing
The legal basis for the processing of the data, if the user has given his consent, is Art. 6 (1) lit. a DSGVO.
5.2 Purpose of data processing
The user's request is necessary for the provision of the content and services requested by the user. This includes pre-contractual measures based on the user's request.
5.3 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
This is the case for the data collected during the inquiry process when the inquiry is deposited on our website and transmitted to us.
5.4 Possibility of objection and removal
As a user, you have the option at any time to have the data stored about you changed or deleted.
6. contact form and e-mail contact
6.1 Description and scope of data processing
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:
- Salutation
- Your name
- Phone number
- message
- IP address of the requestor
- Date and time of the request
For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation. Alternatively, it is possible to contact us via the e-mail address provided. In this case, no data of the user is stored via the website.
6.2 Legal basis for the data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
6.3 Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
6.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
6.5 Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data that was stored in the course of contacting us or sending e-mails will be deleted in this case.
7 External services, tools and plug-ins
a) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The Google tracking codes of this website use the function "_anonymizeIp()", thus IP addresses within member states of the European Union or in other contracting states of the Agreement on the European Economic Area are shortened beforehand in order to exclude a direct personal reference.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Furthermore, this site uses the Google Analytics reports on demographic characteristics, in which data from interest-based advertising from Google and visitor data from third-party providers (e.g. age, gender and interests) are used. This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings.
The data collection and storage can be objected to at any time with effect for the future. By clicking the "Deactivate" button, tracking is completely prevented. For the objection to be made permanently, your browser must accept cookies.
To deactivate Google Analytics for future visits to the page "www.luxapart-eifel.de" click here: Disable
Alternatively, you can object to the data collection by using a Google browser plugin. Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.
b) Google Re-Marketing
This website uses Google Re-Marketing. Google Re-Marketing is an advertising service of Google Inc. ("Google", Mountain View, USA), which enables us to provide you with targeted advertising of presumed interest to you based on your usage behavior during previous visits to our website. This advertising appears only on Google advertising spaces, either Google Ads or the Google Display Network.
You can opt out of Google re-marketing or edit your settings in the Google Ads Preferences Manager. Alternatively, you can prevent re-marketing by disabling cookies in your browser settings.
c) Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Google Web Fonts at developers.google.com/fonts/faq and in Google's privacy policy: www.google.com/policies/privacy/.
More information on the handling of user data can be found in Google's privacy policy: www.google.de/intl/de/policies/privacy/.
d) Google Ads and Google Conversion Tracking
This website uses Google Ads. Google Ads is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
Within the framework of Google Ads, we use the so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google Ads customer receives a different cookie. The cookies cannot be tracked across Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
More information on Google Ads and Google conversion tracking can be found in Google's privacy policy: www.google.de/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
e) Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not made aware that an analysis is taking place.
The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
For more information on Google reCAPTCHA and Google's privacy policy, please refer to the following links: www.google.com/intl/de/policies/privacy/ and www.google.com/recaptcha/intro/android.html.
f) Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
More information on the handling of user data can be found in Google's privacy policy: www.google.de/intl/de/policies/privacy/.
Order data processing with Google
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
g) YouTube
Our site uses the provider YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. Normally, when you call up a page with embedded videos, your IP address is already sent to YouTube and cookies are installed on your computer. However, we have embedded our YouTube videos with the extended data protection mode (in this case, YouTube still contacts Google's Double Klick service, but personal data is not evaluated in the process, according to Google's privacy policy). This means that YouTube no longer stores any information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also assigned to your user account (you can prevent this by logging out of YouTube before viewing the video).
Of the then possible collection and use of your data by YouTube, we have no knowledge and no influence on it. You can find more information in YouTube's privacy policy at www.google.de/intl/de/policies/privacy/. In addition, we refer to our general presentation in this privacy policy for the general handling and deactivation of cookies.
h) Facebook plugins (Like & Share button)
Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the "Like button" ("Like") on our page. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.
When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook's privacy policy at: de-de.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
i) Facebook Pixel, Facebook Custom Audiences, Facebook Conversions.
We use the "Facebook Pixel", Custom Audiences and Facebook Conversions from Facebook on our website. "Facebook" is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
We have installed a "tracking pixel" from Facebook ("Facebook Pixel"), which is retrieved from the Facebook servers each time our website is accessed and registers the access there. This allows website visitors to be specifically included in a Custom Audience. The marketing tool is a targeting option that uses the Facebook pixel to match visitors to our website with people on Facebook. We can thus target groups of visitors with Facebook ads.
According to Facebook, browser information, visited websites and hashed Facebook IDs of website users are stored for this purpose. It cannot be ruled out that Facebook also transmits the information to a server in a third country.
Further information on the Facebook pixel can be found at: www.facebook.com/business/help/651294705016616.
For more information on Facebook Custom Audiences, please visit: developers.facebook.com/docs/marketing-api/audiences-api/websites and developers.facebook.com/docs/facebook-pixel/pixel-with-ads/conversion-tracking.
As can be seen from the Privacy Shield certification of Facebook, Inc. (available at www.privacyshield.gov/list under the search term "Facebook"), Facebook, Inc. has committed to comply with the EU-US Privacy Shield Framework published by the U.S. Department of Commerce and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from member states of the EU and Switzerland, respectively. Facebook, Inc. has declared by certification that it complies with the Privacy Shield Principles.
For more information, please visit: de-de.facebook.com/about/privacyshield
Through the integration of the Facebook Pixel, the use of Facebook Custom Audiences and Facebook Conversions, we pursue the purpose of providing optimized advertising for website visitors. The purpose of processing the data using Facebook Custom Audiences is to create statistics for the formation of user categories in order to enable interest-based targeting of advertising media or advertising measures on the Internet.
The legal basis for the processing of personal data described here is Art. 6 (1) a) DSGVO.
Regarding the storage period of the information, Facebook states that the data will be stored for as long as necessary to provide you or others with products and services (https://de-de.facebook.com/about/privacy/ under "Data storage, deactivation and deletion of accounts").
For further questions, Facebook designates the following contact options and provides the following information (as of September 29, 2016):
1. if you live in the U.S. or Canada:
Please contact Facebook, Inc. online or by mail at:Facebook, Inc.
1601 Willow Road Menlo Park, CA 94025.
2. if you live anywhere else:
The data controller regarding your information is Facebook Ireland Ltd. You can contact this company online or by mail at:
Facebook Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland.
The provision of personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it would possibly result in you not being able to use this function of our website or not being able to use it to its full extent.
Social networks & external links
In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. Insofar as you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that, in addition to the storage of the data specifically entered by you in this social medium, further information will also be processed by the provider of the social network.
Furthermore, the provider of the social network may process the most important data of the computer system from which you visit it - for example, your IP address, the processor type and browser version used, including plug-ins.
If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.
The purpose and scope of the data collection by the respective medium as well as the further processing of your data there as well as your rights in this regard can be found in the respective provisions of the respective responsible party, e.g. under:
Facebook: de-de.facebook.com/about/privacy/ Twitter: twitter.com/de/privacy Instagram: help.instagram.com/155833707900388 Google: policies.google.com/privacy
We would also like to point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of data on these third-party websites.
8. data protection information for our Facebook fan page and Facebook Insights
We operate our Facebook presence to draw attention to our company and our products and to get in touch with you as a visitor and user of this Facebook presence. For more information about us as well as our activities, company, etc., please visit our website at www.luxapart-eifel.de.
As the operator of the Facebook page, we have no interest in collecting and further processing your individual personal data for analysis or marketing purposes.
Further information on our handling of personal data can be found in this privacy policy.
The operation of this Facebook page including the processing of users' personal data is based on our legitimate interests in a timely and supportive information and interaction opportunity for and with our users and visitors pursuant to Art. 6 para. 1 lit. f. DSGVO.
Facebook Ireland Ltd ("Facebook") provides us as Facebook Fanpage operators with so-called "Facebook Insights" ("Insights"). The Insights are various statistics that provide us with information about the use of our Facebook Fanpage. Detailed information on this can also be found at www.facebook.com/business/a/page/page-insights.
In order to create these statistics, various information provided by you (including personal data) is processed by Facebook. In this context, the personal data is processed by Facebook and us as joint controller within the meaning of Art. 26 DSGVO. In the following, we provide you with the essential information of the agreement concluded between Facebook and us (https://www.facebook.com/legal/terms/page_controller_addendum) pursuant to Art. 26 DSGVO.
8.1 Responsible party
Jointly responsible for the processing are:
Facebook Ireland Ltd 4, Grand Canal Square, Dublin 2 Ireland and Kürsten & Kürsten GbR, Mittelstr. 15, 53520 Harscheid, e-mail: info@luxapart-eifel.de
8.2 Processing of personal data by Facebook.
The European Court of Justice (ECJ) ruled in its judgment of June 5, 2018 that the operator of a Facebook page is jointly responsible with Facebook for the processing of personal data.
We are aware that Facebook processes users' data for the following purposes:
Advertising (analysis, creation of personalized ads)
Creation of user profiles
Market research.
Facebook uses cookies to store and further process this information, which are small text files that are stored on the various end devices of the users. If the user has a Facebook profile and is logged in to it, the storage and analysis also takes place across devices.
The exact processing of your data when visiting our Facebook fan page depends on whether you have a Facebook account or not. If you have an account with Facebook, Facebook can permanently assign the data to your account in order to learn more about you in this way. Even if you do not have an account with Facebook, Facebook can store your data. This can happen through the use of cookies. These are mostly small text files that are stored on your respective device. Various information is written to this text file, which can be read out again at a later time. This makes it possible for Facebook to store and process information about you even without you having a Facebook account. Facebook's privacy policy contains further information on data processing: www.facebook.com/about/privacy/ Objection options (so-called opt-out) can be set here www.facebook.com/settings. Further information about Facebook and other usage-based online advertising can also be found at www.youronlinechoices.com Facebook Inc., the U.S. parent company of Facebook Ireland Ltd. is certified under the EU-U.S. Privacy Shield and thus gives a commitment to adhere to European data protection guidelines. Further information on Facebook's Privacy Shield status can be found here: www.facebook.com/about/privacyshield. The transfer and further processing of users' personal data to third countries, such as the U.S., and the associated possible risks for users cannot be ruled out by us as the operator of the site.
8.3 Responsibility with regard to the processing of facebook Insights data
Facebook has assumed primary responsibility (assumption of all obligations under the GDPR) for data processing. This means in particular:
Facebook assumes the necessary information obligations (e.g. Art. 13 DSGVO).
Data subject rights can be asserted against Facebook (e.g., right to information or deletion, objection to data processing or revocation of any consent given; see also section "V. Data subject rights")
Ensuring the technical and organizational measures of data processing.
Facebook provides comprehensive information with regard to data processing at www.facebook.com (Art. 13 DSGVO). In order to provide you with an overview of the essential information, we also refer to the content provided by Facebook within the scope of this privacy notice.
In the context of Insights usage, we only receive anonymized statistics from Facebook about the use of our fan page. We can only see how many users have carried out certain interactions, but not which user has carried out a certain action. The statistics of the Insights data do not allow us to draw any conclusions about a person.
Regardless of Facebook's agreed primary responsibility, you can of course also assert your rights under the GDPR directly against us. We will immediately forward this request to Facebook via a form provided for this purpose.
8.4 Legal basis for the processing
You can view the legal basis and the purposes of Facebook's processing at www.facebook.com/about/privacy/legal_bases and at de-de.facebook.com/policy.php.
Our legal basis for processing Insights data is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. We have a legitimate interest in being able to track user behavior on our Facebook fan page. In particular, this enables us to record the reach and effectiveness of our campaigns, postings and other activities through processed statistics. This enables us to continuously optimize our website and our offer in line with demand. This also represents the purpose of the processing for us.
8.5 Data subject rights
In principle, you have the following rights:
Right to information (Art. 15 DSGVO) Right to rectification (Art. 16 DSGVO) Right to object (Art. 21 DSGVO) Right to erasure (Art. 17 DSGVO) Right to restriction of processing (Art. 18f. DSGVO) Right to data portability (Art. 20 DSGVO).
You have the right to revoke consent once given with effect for the future at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You can assert these rights directly against Facebook or against us.
With regard to processing by cookies, you have the right to object. You can exercise this, for example, as follows:
In your browser settings, you can restrict or completely prevent the setting of cookies. You can also arrange for the automatic deletion of cookies when closing the browser window.How to delete cookies in the most common browsers and change the cookie settings can be found here, among other things:
Google Chrome: Website Mozilla Firefox: Web page Apple Safari: Web page Microsoft Internet Explorer: Web page
At de-de.facebook.com/policies/cookies/ you can also adjust your settings for the use of cookies. Here you will find under the sections "If you have a Facebook account" (Facebook account available) and "Public" (no Facebook account available), you will find information on how to object to Facebook processing.
You can determine the storage period of the cookies via your browser by displaying the cookies (usually by clicking on the "i" next to the address bar, e.g. in Firefox or Google Chrome).
9. rights of the data subject
The following list includes all data subject rights under the GDPR. Rights that have no relevance for your own website do not need to be mentioned. In this respect, the listing can be shortened.
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
9.1 Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you may request information from the controller about the following:
1. the purposes for which the personal data are processed;
2. the categories of personal data which are processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data, if the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.
9.2 Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
9.3 Right to restriction of processing.
You may request the restriction of the processing of personal data concerning you under the following conditions:
1. if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
3. the controller no longer needs the personal data for the purposes of the processing, but you need it for the assertion, exercise or defense of legal claims; or
4. if you have objected to the processing pursuant to Article 21 (1) DSGVO and it has not yet been determined whether the controller's legitimate grounds override your grounds.
If the processing of personal data concerning you has been restricted, such data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
9.4 Right to erasure
Obligation to erase
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
1. the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. you revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.
3. you object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
4. the personal data concerning you have been processed unlawfully.
5. the erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. the personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.
Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as the data subject, have requested them to erase all links to or copies or replications of such personal data.
Exceptions
The right to erasure does not exist insofar as the processing is necessary to
1. for the exercise of the right to freedom of expression and information;
2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(a) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, where the right referred to in section (a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
b) for the assertion, exercise or defense of legal claims.
9.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
9.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that.
1. the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and
2. the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
9.7 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
9.8 Right to revoke your declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
9.9 Automated decision in individual cases including profiling.
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you. This does not apply if the decision
1. is necessary for the conclusion or performance of a contract between you and the controller,
2. is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests, or
3. is made with your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
9.10. Right to complain to a supervisory authority.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
