Data protection

Privacy statement

 

I. Responsibility

Responsibility within the meaning of the data protection basic regulation and other national data protection laws of member states as well as other data protection regulations is carried by:

Rotalis Reisen GmbH

Joseph-Haydn-Str. 8

4780 Schärding

Austria

Tel.: +43 7712 50000

Fax: +43 7712 551150

E-Mail: info@rotalis.com

 

II. General information regarding data processing

1. Scope of personal data processing

We generally only process the personal data of our users, interested parties or clients as long it is required for the provision of a functional website, as well as our contents and services. Personal data is only processed regularly after obtaining the consent of the party concerned. An exception applies in such cases in which a previous obtaining of consent is not possible due to factual reasons and the processing of the data is permitted by legal provisions.

 

2. Legal basis for the processing of personal data

As far as the consent of the concerned person is obtained for the processing operations of personal data, then Art. 6 paragraph 1 S. 1 lit. a EU-data protection basic regulations serves as legal basis.

If personal data which is necessary for the fulfilment of a contract is processed, whose contracting party is the person concerned, then Art. 6 paragraph 1 S. 1 lit. b data protection basic regulations serves as legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.

As far as the processing of personal data is required for the fulfilment of a legal duty which is subject to our company, then Art. 6 paragraph 1 S. 1 lit. c data protection basic regulations serves as legal basis.

In such cases where vital interests of the person concerned or another person cause the necessity of the processing of personal data, then Art. 6 paragraph 1 S. 1 lit. d data protection basic regulations serves as legal basis.

If the processing is necessary to preserve a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first-named interest, then Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations serves as legal basis for the processing.

 

3. Data deletion and storage period

Personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. The data can continue to be stored, if this was intended by the European or national legislator in Union regulations, laws or other rules, to which those who are liable are subject to. Data is also blocked or deleted when the storage period required by the norms mentioned expires, unless a necessity for further storage of the data exists, for a conclusion of contract or performance of contract.

 

III. Provision of the website and the compilation of Log files

1. Description and scope of the data processing

Our system collects automated data and information from the calling computer system every time our homepage is called up.

The following information is obtained:

• Browser type/-version of the user;
• Operating system of the user;
• IP-Address/Internet-Service-Provider of the user;
• Date/time of access;
• Websites, from which the system of the user can obtain access to our homepage;
• Websites, which are called up by the system of the user by way of our website.

The data is stored in the log files of our system. This data is not stored along with other personal data of the user.

 

2. Legal basis for the processing of data

The legal basis for the temporary storage of data and the log files is Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations.

 

3. Purpose of the processing of data

The temporary storage of the IP-Address by the system is necessary in order for the website to be distributed to the user’s computer. The IP-Address of the user must be stored for the duration of the session.

The storage in log files takes place in order to ensure the functionality of the website. The data additionally serve as optimisation of the website and to ensure the safety of our information technology systems. An evaluation of data for marketing purposes does not take place in this context.

Our legitimate interest of the data processing also lies in these purposes according to Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations.

 

4. Duration of storage

Data is deleted, as soon as it no longer necessary for the achievement of the purpose of its collection. If the data is collected for the provision of the website, then this is the case when the respective session has ended.

If the data is stored in log files, then this is the case after seven days at the latest. Further storage is possible. In this case, the user’s IP-addresses are deleted or alienated, so that an allocation to the calling client is no longer possible.

 

5. Possibility of objection- and elimination

The collection of data for the provision of the website and the storage of data in Log files is essential for the running of the homepage. It is not possible for the user to make any objections.

 

IV. Usage of Cookies

1. Description and scope of the data processing

Our website uses Cookies. Cookies are text files, which are stored in the Internet browser or from the Internet browser on to the user’s computer system. If a user calls up a website, then the Cookie can be stored on the operating system of the user. This Cookie contains a typical character string, which enables a clear identification of the Browser when the website is called up again.

The user’s data which is provided in this manner is pseudonymised by technical precautions. Therefore the calling client can no longer be attributed to by the provision of the data. The data is not stored with other personal data of the user.

When opening our website, the user will be informed by an information banner about the usage of cookies for analysis purposes and attention will be drawn to this data protection declaration.

This website uses the following types of Cookies, whose scope and operating modes can be explained as follows:

• Transient Cookies

Transient Cookies are automatically deleted when you close the browser. This especially includes the Session-Cookies. These store a so-called Session-ID, with which various enquiries made by your Browser during the joint session can be attributed to. Your computer can thereby be recognised when you visit our website again. The Session-Cookies are deleted, when you log out or close the Browser.

• Persistent Cookies

Persistent Cookies are automatically deleted after a given period of time, which can differ according to Cookie. You can delete the Cookies in the security settings of your Browser at any time.

 

2. Legal basis for the data processing

The legal basis for the processing of personal data under the usage of Cookies is Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations.

 

3. Purpose for the data processing

We use Cookies to make our website more user-friendly. Several elements of our homepage especially require for the calling Browser to also be identified after a page change.

 

4. Duration of storage, possibility of objection- and elimination

Cookies are stored on the user’s computer and transmitted from this to our homepage. The user therefore has complete control of the usage of the cookies. It is possible to deactivate or restrict the transmission of the cookies by changing the settings in your internet browser. Cookies which have already been stored can be deleted at any time. This can also take place automatically, by determining the maximum duration of storage in your browser settings. If Cookies are deactivated for our website, then it might be possible that not all functions of the website can be fully made use of.

The following links will assist you in how to adjust the settings for declining or accepting Cookies in the browsers which are most widely used:

• Internet Explorer / Windows Edge: http://windows.microsoft.com/de-de/windows-vista/block-or-allow-cookies
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
• Safari: https://support.apple.com/kb/ph21411?locale=de_DE
• Opera: http://help.opera.com/Windows/10.20/de/cookies.html

 

V. Booking of journey

1. Booking process

1.1 Description and scope of the data processing

The data entered into the respective input mask is transmitted to us and stored. A booking is not possible if the mandatory details are not filled out in the fields indicated. The user‘s IP-Address as well as the date and time of the access is also saved.

 

1.2 Legal basis for the data processing

The processing of data takes place upon your booking and is necessary for the processing of your booking or the fulfilment of the obligations resulting from the concluded contract according to Art. 6 paragraph 1 S. 1 lit. b data protection basic regulations.

 

1.3 Purpose of the data processing

The collection of this information takes place:

• To be able to identify you as our client;
• To be able to process, fulfil and conclude your booking;
• To be able to correspond with you;
• In order to issue your invoice;
• For the conclusion of possible existing liability claims as well as the assertion of possible claims brought against you.

 

1.4 Duration of storage

The data are deleted, as soon as it is no longer necessary for the achievement of the purpose of its collection. This is the case regarding the data stored for the fulfilment of the contract, if the data for the implementation of the contract are no longer needed. It can also be necessary to store personal data of the contract partner after the conclusion of a contract, in order to fulfil contractual or legal obligations. Personal data collected by us for your booking process is therefore stored until the legal retention obligation expires and then deleted, unless, we are obliged to store the data longer according to Art. 6 paragraph 1 S. 1 lit. c data protection basic regulations on the grounds of tax and commercial law retention regulations and documentation obligations (from HGB, StGB or AO) or if you have agreed to a longer storage period according to Art. 6 paragraph 1 S. 1 lit. a data protection basic regulations.

 

2. Data transmission

2.1 Data transmission for the processing of a contract

As far as it is necessary for the process of your booking, we will pass on the names of the travellers to hotels, transport companies, travel insurances and partner companies for the purpose of the conclusion of contract according to Art. 6 paragraph 1 S. 1 lit. b data protection basic regulations. The disclosure only takes place as long as this is necessary for the processing of the contract.

 

2.2 Payment transactions; payment service providers credit card payment

Payment transaction with the common means of payment takes place exclusively via an encrypted SSL- or TLS-connection.

If you are paying by credit card, we will pass on your payment details within the framework of payment processing to the SIX Payment Services AG, Hardturmstrasse 201, CH-8021 Zürich, Tel: +41 58 399 9111, E-Mail: info.ch@six-payment-services.com (subsequently "SIX").

The disclosure takes place according to Art. 6 paragraph 1 S. 1 lit. b data protection basic regulations and only as long as  it is necessary for the payment process.

SIX reserves the right for the implementation of a credit check for the credit card payment method. Your payment details will be passed on to credit agencies if necessary according to Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations on the basis of the legitimate interest of SIX to assess your solvency. The result of a credit check in relation to the statistic payment default probability is used by SIX for the purpose of the decision for the provision of the respective payment method. The credit check can contain probability values (so-called Score values). As long as Score values enter into the result of the credit check, then these have their foundation in a scientifically proven mathematical statistical method. Address data, inter alia, enters into the calculation of the Score values, but not exclusively.

For further data protection law information, inter alia on the employed credit agencies, please refer to the data protection statement of SIX: www.six-payment-services.com/privacy-statement. You will also find further information about Six under the following Link: www.six-payment-services.com/gdpr.

You can object to this processing of your data at any time by sending a message to SIX.

 

VI. Newsletter; Direct advertising by post

1. Newsletter

1.1 Description and scope of the data processing

You can agree to a subscription of our newsletter, by which we can inform you of our current interesting offers. The advertised products and services are designated in the declaration of consent.

We use the so-called Double-Opt – In method for the registration for our newsletter. This means, that after your registration, we will send you an E-Mail to the given E-Mail address, in which we will ask you to confirm your request for the newsletter to be sent. You must confirm your registration within 24 hours, in order for it to be activated. We will also save your used IP-addresses respectively and the time of registration and confirmation. The purpose of the method is to prove your registration and, if necessary, to clarify a possible violation of your personal data.

Mandatory information for the sending of the newsletter is only your E-Mail address. The provision of further specially marked information is optional and is used to be able to address you personally. After your confirmation, we will save your E-Mail address for the purpose of sending the newsletter.

 

1.2 Legal basis for the data processing

Legal basis is Art. 6 paragraph. 1 S. 1 lit. a data protection basic regulations.

 

1.3 Purpose of the data processing

The acquisition of the user’s E-Mail address serves in order for the newsletter to be sent.

 

1.4 Duration of the storage

The data are deleted, as soon as it is no longer necessary for the achievement of the purpose of its collection.

 

1.5 Revocation- and elimination possibility

You can revoke your consent to the sending of the newsletter at any time and can unsubscribe it. You can explain your withdrawal by clicking onto the link provided in every newsletter-E-Mail, or by sending an E-Mail to newsletter@rotalis.com.

 

1.6 Delivery service, CleverReach

We use the services of CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede.

CleverReach is a service, with which the delivery of the newsletter can be organised and analysed. If you provide the information for the purpose of receiving the newsletter (e.g. E-Mail address), then this will be stored on the servers of CleverReach in Germany or Ireland. Please note that we will analyse your user behaviour during the sending of the newsletter. With the help of the so-called Conversion-Trackings, it is also possible to analyse whether a pre-defined action has taken place after clicking on to the link in the newsletter. For further information on data analysis by CleverReach-Newsletter please refer to: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/. If you do not wish for an analysis by CleverReach, then you must unsubscribe the newsletter. There is an appropriate link provided for this in every newsletter. The information is saved for as long as you subscribe to the newsletter. After a cancellation, we will save the data purely statistically and anonymously. For more information, please refer to the data protection regulations of CleverReach at: https://www.cleverreach.com/de/datenschutz/.

 

2. Direct advertisement by post

2.1 Description and scope of the data processing

We use the postal address given by you (next to your name) relating to the booking of journeys or catalogue orders, in order to inform you regularly by direct advertisement by post (e.g. for the mailing of interesting offers and information on our products, especially the catalogue delivery).

 

2.2. Legal basis for the processing

Legal basis for the direct advertisement by post is Art. 6 paragraph. 1 S. lit. f data protection basic regulations.

 

2.3 Purpose of the data processing

The acquisition of your name as well as your address is also used to send you direct advertisements by post. According to the recital 47 of the data protection basic regulations, the processing of personal data for the purpose of direct advertisement can be seen as a process serving a legitimate interest. In this respect, it is important to take into consideration, that a client relationship exists between ourselves on the grounds of your journey booking or catalogue order and that we therefore have a legitimate interest to inform you of current offers from now on.

 

2.4 Duration of the storage

The data are deleted, as soon as it is no longer needed for the achievement of the purpose of its collection.

 

2.5 Right of objection

You can object to this type of direct advertisement by letter at any time. You can explain your objection in an E-Mail to info@rotalis.com or by sending a message (e.g. fax or letter) to the contact details given in I. of this statement.

 

VII. Contact by form and E-Mail

1. Description and scope of the data processing

When you have made contact with us via a form on our website or by E-Mail, then the data provided by you (your E-Mail address and if applicable, any further information provided by you) will be transmitted to us and saved by us. No data is passed on to a third party in this respect. The data are solely used for the processing of the conversation.

 

2. Legal basis for the data processing

Legal basis for the processing of the data with the existence of the user’s consent is Art. 6 paragraph 1 S. 1 lit. a data protection basic regulations.

Legal basis for the processing of data which are transmitted in the course of the contact being made, is also Art. 6 paragraph. 1 S. 1 lit. f data protection basic regulations.

If the contact made is intended for the conclusion of a contract, then the additional legal basis for the processing Art. 6 paragraph. 1 S. 1 lit. b data protection basic regulations.

 

3. Purpose of the data processing

The processing of personal data from the input mask serves solely for the processing of making contact. Other personal data processed during the sending of the form serve to prevent a violation of the form.

 

4. Duration of the storage

The data in this context will be deleted, when the storage is no longer necessary, or the processing will be restricted, if legal retention obligations exist.

 

5. Revocation and disposal possibility

It is possible for the user to revoke his/her consent for the processing of personal data at any time or to disagree with the storage of his/her personal data. All personal data which is stored in the course of the contact being made will be deleted in this case.

 

VIII. Google Analytics

1. Scope of the processing of personal data

This website uses Google Analytics, a web analysis service of Google Inc. („Google“). Google Analytics uses so-called „Cookies“, text files, which are stored on your computer and enable an analysis of the usage of the website by you. The information generated by the cookie of your usage of this website is normally transmitted to a server of Google in the USA and stored there. In the case of the activation of the IP-anonymization on this website, your IP-address will however be shortened by Google beforehand within member states of the European Union or in other contracting states of the agreement over the European economic area. The full IP-address will only be transmitted to a server of Google in the USA and shortened there in exceptional cases. On behalf of the owner of this website, Google will use this information, to analyse your usage of the website, in order to compile reports of the website activities and to render further services associated with the website usage and the Internet usage with respect to the website owner.

The IP-address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

This website uses Google Analytics with the extension „_anonymizeIp()“. IP-addresses are therefore shortened when processed further, and therefore there is no chance of any direct link to a particular individual. If any reference to persons is made via your collected data, then this will be excluded immediately and the personal data will therefore be deleted immediately.

 

2. Legal basis for the processing of personal data

Legal basis for the processing of personal data of the user is Art. 6 paragraph. 1 S. 1 lit. f data protection basic regulations.

 

3. Purpose of the data processing

We use Google Analytics, in order to analyse the usage of our website and to make regular improvements. We are able to improve our service via the obtained statistics and can arrange this for you as a user in a more interesting way. In exceptional cases in which personal data are transmitted to the USA, Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

4. Duration of the storage

The data are deleted, as soon as they are no longer needed for our record-keeping purposes. This is the case after 14 months at Google Analytics.

 

5. Revocation- and disposal possibility

5.1 Browser-Setting

You can prevent the storage of Cookies by way of an appropriate setting in your Browser-Software; please take note, however, that you might not be able to make complete use of all the functions of this website in this case.

 

5.2 Browser-AddOn

You can also prevent the acquisition of the data generated by the Cookie and by your usage of the website (incl. your IP-address) to Google as well as the processing of this data by Google, by downloading and installing the Browser-Add-on which is available under the following Link: http://tools.google.com/dlpage/gaoptout?hl=de.

 

5.3 Opt-Out-Cookie

For an alternative to the Browser-Plugin or within Browsers on mobile devices, please click onto the following Link, to set an Opt-Out-Cookie, which prevents the acquisition by Google Analytics within this website in the future (this Opt-Out-Cookie only functions in this Browser and only for this Domain, if you delete your Cookies in this Browser, then you must clink on this Link once again): Google Analytics deaktivieren

 

6. Information of the third party provider

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User conditions: http://www.google.com/analytics/terms/de.html,

Overview on data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,

Data protection statement: http://www.google.de/intl/de/policies/privacy.

 

7. Cross-device analysis

This website also uses Google Analytics for a cross-device analysis of streams of visitors, which is implemented via a User-ID. You can deactivate the cross-device analysis of your usage in your account under „My Data“, „personal Data“.

 

8. Demographic characteristics

This website uses the function „demographic characteristics“ from Google Analytics. Thus reports can be made, which include statements on age, gender and interests of the website visitors. This data stems from interest-related advertising from Google as well as from visitor data from third party providers. This data cannot be assigned to any specific person. You can deactivate this function at any time via the display settings in your Google-account or generally prohibit the acquisition of your data by Google Analytics, as noted by the point „Objection to data acquisition“.

 

IX. Online-advertisement

1. Google Adwords Conversion

1.1 We use the offer from Google Adwords, to use the help of advertising material (so-called Google Adwords) in order to draw attention to our attractive offers on external websites. We can determine how successful the individual advertising measures are in perspective of the data from the advertising campaigns. We therefore pursue the interest to present advertisements which are of interest to you, to make our website more interesting for you and to reach a fair calculation of advertising costs.

 

1.2 This advertising material is delivered by Google via so-called „Ad Server“. We also use Ad Server Cookies, through which specific parameters of performance measures, such as the display of the advertisements or clicks by the user, can be measured. As long as you enter our website via a Google-advertisement, then a cookie will be saved on your computer by Google Adwords. These Cookies normally become invalid after 30 days and are not intended to identify you personally. Information regarding this Cookie are usually saved as analysis values, such as the Unique Cookie-ID, number of Ad Impressions per placing (Frequency), last impression (relevant for Post-View-Conversions) as well as Opt-out-Information (Marking, that the user does no longer wish to be addressed or spoken to).

 

1.3 These Cookies enable Google to recognise your Internet browser. As long as a user visits certain pages of the website of an Adword client and the Cookie saved on his/her computer has not yet expired, then Google and the client can see that the user has clicked onto the advertisement and has been redirected to this page. Every Adwords-client is assigned with a different Cookie. Cookies can therefore not be traced via the websites of Adwords-clients. We do not collect or process any personal data in the named advertising measures. We only receive statistic evaluations from Google. With these evaluations, we can see which of the used advertising measures are especially effective. We do not receive any further data arising from the use of the advertising material, and we are above all unable to identify the user by means of this information.

 

1.4 Your Browser automatically sets up a direct connection with the Server from Google, on the basis of the used Marketing-Tools. We do not have any influence on the scope and the further use of the data, which is collected by Google by the use of this tool and therefore inform you according to our state of knowledge: Through the involvement of AdWords Conversion, Google receives the information, that you have called up the relevant part of our website or have clicked onto one of our advertisements. As long as you are registered at a service of Google, then Google can assign the visit to your account. Even if you are not registered at Google or have not logged in, then it is possible that the provider can learn of your IP-address and can save it.

 

1.5 You can prevent the participation in this tracking method in several different ways: a) through an appropriate setting in your Browser-Software, the suppression of third Cookies especially results in that you do not receive any advertisements from third party providers; b) through the deactivation of the Cookies for Conversion-Tracking, in which you set your Browser in such a way, that Cookies from the Domain „www.googleadservices.com“ are blocked, https://www.google.de/settings/ads, whereby this setting becomes deleted when you delete your Cookies; c) through the deactivation of the interest-related advertising of the provider, which are part of the self-regulatory campaign „About Ads“, via the Link http://www.aboutads.info/choices, whereby this setting becomes deleted when you delete your Cookies; d) through the permanent deactivation in your Browsers Firefox, Internet Explorer or Google Chrome under the Link http://www.google.com/settings/ads/plugin. Please take note that you might not be able to make full use of all the functions from this offer in this case.

 

1.6 Legal basis for the processing of your data is Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations. Further information regarding data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. You can also visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org as an alternative. Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

2. Google Remarketing

Apart from Adwords Conversion, we use the application Google Remarketing. This is a method on which we would like to address you with again. Through this application, our advertisements can be shown to you after you have visited our website and continue to use the Internet. This takes place by means of stored Cookies in your Browser, where your usage behaviour when visiting different websites is collected and evaluated by Google. Google can determine your previous visit to our website. According to Google, no amalgamation takes place by Google within the frame of the remarketing of collected data with your personal data, which are saved by Google if necessary. According to Google, a pseudonymization is used especially during remarketing.

 

X. Plugins and Tools

1. Google Fonts

1.1 On this website, we use the offer from Google Fonts for the uniform presentation of fonts, which are provided by Google. This serves as an appropriate presentation of our Internet presence and depicts a legitimate interest according to Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations.

 

1.2 Google receives the information through the visit to the website that you have called up the relevant subpage of our website. The data named under III. of this statement are also transmitted. This takes place regardless of whether Google provides a user account, into which you are logged in, or whether no user account exists. When you are logged into Google, then your data will be directly allocated to your account. If you do not wish for the allocation with your profile from Google, then you must log out before the button is activated. Google saves your data as a user profile and uses it for advertisement and market research purposes and/or needs-based design of its website. An evaluation such as this takes place especially (also for users which are not logged in) for the provision of needs-based advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of this user profile, whereby you will have to address Google for this exertion.

 

1.3 Further information for the purpose and scope for the collection of data and its processing by the provider can be found in the data protection statements of the provider. Here you will also receive further information on your rights and configuration options in this regard for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

2. Google Maps

2.1 On this website, we use the offer from Google Maps. We can thereby show you interactive maps directly in the website and enables you the convenient use of the map function. This depicts a legitimate interest in the sense of Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations.

 

2.2 Google receives the information through the visit to the website that you have called up the relevant subpage of our website. The data named under III. of this statement are also transmitted. This takes place regardless of whether Google provides a user account, into which you are logged in, or whether no user account exists. When you are logged into Google, then your data will be directly allocated to your account. If you do not wish for the allocation with your profile from Google, then you must log out before the button is activated. Google saves your data as a user profile and uses it for advertisement and market research purposes and/or needs-based design of its website. An evaluation such as this takes place especially (also for users which are not logged in) for the provision of needs-based advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of this user profile, whereby you will have to address Google for this exertion.

 

2.3 Further information for the purpose and scope for the collection of data and its processing by the Plug-in-provider can be found in the data protection statements of the provider. Here you will also receive further information on your rights and configuration options in this regard for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

3. YouTube

3.1 We have integrated YouTube-Videos into our online offer, which are saved under http://www.YouTube.com and can be played directly from our website.

 

3.2 YouTube receives the information through the visit to the website that you have called up the relevant subpage of our website. The data named under III. of this statement are also transmitted. This takes place regardless of whether YouTube provides a user account, into which you are logged in, or whether no user account exists. When you are logged into Google, then your data will be directly allocated to your account. If you do not wish for the allocation with your profile by YouTube, then you must log out before the button is activated. YouTube saves your data as a user profile and uses it for advertisement and market research purposes and/or needs-based design of its website. An evaluation such as this takes place especially (also for users which are not logged in) for the provision of needs-based advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of this user profile, whereby you will have to address YouTube for this exertion.

 

3.3 Further information for the purpose and scope for the collection of data and its processing by YouTube can be found in the data protection statement. Here you will also receive further information on your rights and configuration options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted itself to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework.

4 Privacy Policy for the usage of The Trade Desk
On this website, we use a tool from The Trade Desk, Inc. (42 N. Chestnut Street, Ventura, CA 93001), which collects data for analysis, marketing and optimization purposes, thereby helping us to improve our marketing efforts and our website, The collected data will be used by The Trade Desk to create anonymous usage profiles. For the collection of data, pseudonymous Online Identification Numbers (Online ID) such as e.g. Cookie IDs, IP address, Advertising ID used. No unique user-related data such as name or address is stored here. Both the Cookie ID and the Advertising ID allow you to recognize your device and your Internet browser. The Trade Desk Privacy Policy can be found here: https://www.thetradedesk.com/general/privacy

4.1 Cookies from The Trade Desk:
TDCPM
TDID

If you do not want data collection by The Trade Desk, you can object to the following link and deactivate the data collection, in which case an opt-out cookie is set on your computer:
http://insight.adsrvr.org/track/stop?action=dooptout
This opt-out cookie may not be deleted as long as the storage of the data is contradicted and is always valid only for the browser used and thus for the device on which the browser is used.

4.2 Duration of data storage
The cookies lose their validity after 12 months.
 

XI. Social-Media Buttons

Social-Media Buttons from social networks are used on our website.

These serve to preserve our predominant legitimate interests within the frame of a balancing of interests in an optimal marketing of our offer according to Art. 6 paragraph 1 S. 1 lit. f data protection basic regulations. These Buttons are not integrated into the page without restriction as Plugins, but are merely integrated into the page by the use of an HTML-Link, in order to increase the protection of your data when visiting our website. This integration guarantees, that when a page from our website is called up which contains such Buttons, that no connection is set up with the servers of the provider of the respective social network.

If you click onto one of the Buttons, then a new window in your Browser is opened and calls up the page of the respective service provider, on which you are able to (possibly after entering your login details) press the Like- or Share-Button for example.

For the purpose and scope of the collection of data and the further processing and usage of data by the provider on their pages as well as a contact possibility and your rights and configuration options in this regard for the protection of your privacy, please refer to the data protection information of the providers:

• Facebook Inc., http://www.facebook.com/policy.php
• Google Inc., http://www.google.com/intl/de/+/policy/+1button.html
• Twitter Inc., https://twitter.com/privacy
• Instagram Inc., https://instagram.com/about/legal/privacy/

 

XII. Rights of the person concerned

If your personal data is processed, then you are affected in the sense of the data protection basic regulations and you are entitled to the following rights against those responsible:

• Right of information (Art. 15 data protection basic regulations)
• Right of correction (Art. 16 data protection basic regulations)
• Right of deletion (Art. 17 data protection basic regulations)
• Right of restriction of processing (Art. 18 data protection basic regulations)
• Right of information (Art. 19 data protection basic regulations)
• Right of data portability (Art. 20 data protection basic regulations)
• Right of objection (Art. 21 data protection basic regulations)
• Right of the withdrawal of the data protection consent declaration (Art. 7 paragraph 3 data protection basic regulations)
• Right of complaint to a supervisory authority (Art. 77 data protection basic regulations)