privacy policy

I. Introduction

We are pleased that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.

Our online offering extends across the following portals:

www.campguide.eu , www.camping.info , www.campingboerse.info , www.campingbörse.info , www.campingforum.at , www.campingfuehrer.at , www.caravanmarkt.info , www.einstellplatz.info , www.glamping.info , images-camping.info , www.stellplatz.info

II. General information

In accordance with Art. 13 GDPR, we provide information below about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.

The responsible party according to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is

Camping.info GmbH
Oranienburger Str. 27
10117 Berlin
Germany

You can reach our external data protection officer at:

Bugl & Kollegen Society for Data Protection and Information Security mbH
Alexander Bugl
Eifelstraße 55
93057 Regensburg
Email: kontakt@buglundkollegen.de

III. Contact

a. Type and purpose of processing

Our website contains contact details such as addresses, telephone numbers and email addresses that enable quick contact and direct communication with us and our contact persons. When you contact us, we process the personal data that you provide to us depending on the means of communication you choose. This may include your full name, address, telephone number used, email address used and other personal data that you provide to us in the course of communication.

b. Legal basis for processing

Your personal data is processed on the basis of a legitimate interest (Article 6 (1) (f) GDPR). By providing contact details, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions. If you contact us to request a quote, the data provided will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

c. Data categories

Master data: Name
Contact details: email address and telephone number
message content

d. recipient

Recipients of the data are internal employees of the departments: Customer Support and Organization

e. Storage periods

Data will be deleted no later than 6 months after the request has been processed. If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Possibility of objection

You have the option to object to the processing of your personal data at any time. You can inform us of your revocation at any time using the contact option provided at the beginning of this privacy policy.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.

IV. Your rights

If your personal data is processed as a user, you are considered to be a data subject in accordance with the GDPR. Data subjects have the following rights vis-à-vis the controller:

Right to information (Article 15 GDPR)
Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to information regarding the rectification or erasure of your personal data or the restriction of processing (Article 19 GDPR)
Right to data portability (Article 20 GDPR)
right to object (Article 21 GDPR)
Right to revoke consent given. The legality of the data processing carried out up to the time of revocation remains unaffected due to the consent that was valid up to that point. (Art. 7 para. 3 GDPR)
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Contact details for the supervisory authorities in each country: Click here

V. Hosting

The hosting services serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email sending, security services and technical maintenance services, which we use for the purpose of operating this online offering.

We process inventory data, contact data, content data, contract data, usage data, meta and communication data from our customers on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 (1) (f) GDPR.

VI. Accessing the website

If you use the website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address
Date and time of the request
time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
access status/HTTP status code
amount of data transferred
website from which the request comes
browser
operating system and its interface
Language and version of the browser software.

We may also use another service provider to display the data protection declaration. An embedding code is used, via which your IP address is transmitted to the service provider in question (preeco GmbH).

We process your data for a limited period of time based on our legitimate interest in order to be able to derive personal data in the event of unauthorized access or attempted access to local servers and in order to be able to properly display the data protection declaration and load the fonts we use from our own server (Art. 6 Para. 1 lit. f GDPR).

VII. Contact and contact form

a. Type and purpose of processing

The data you enter in the contact form will be saved for the purpose of communicating with you individually. For this purpose, you must provide a valid email address and your name. This is used to assign the request and then answer it. Providing further data is optional.

If you also contact us by email or telephone, we will process the contact details you use to respond to your request.

b. Legal basis for processing

Your personal data is processed on the basis of a legitimate interest (Article 6 (1) (f) GDPR). By providing the contact form via Cloudflare, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions. If you contact us to request a quote, the data provided will be processed to carry out pre-contractual measures (Article 6 (1) (b) GDPR).

c. Data categories

Master data: Name
Contact details: email address and telephone number
message content
Meta and protocol data: IP address IP4, time of request

d. recipient

Recipients of the data are internal employees of the support and organization departments and, if applicable, contract processors.

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Possibility of objection

You have the right to object to the processing of your personal data at any time. You can inform us of your objection at any time using the contact option provided at the beginning of this privacy policy.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.

VIII. Which cookies are used

What type of cookies do we use?

Necessary cookies

These cookies are necessary for the website to function properly. An example of this is saving your cookie preferences via our cookie banner.

performance cookies

These cookies are used to collect statistical information about the use of our website, also known as analytics cookies. We use this data to improve performance and optimize the website.

Functional cookies

These cookies enable more functionality for our website visitors. These cookies can be set by our external service providers or our own website. An example of this is the ability to play online videos.

Advertising / Tracking Cookies

These cookies are set by third-party advertising partners and are used for profiling and tracking data across multiple websites. If you accept these cookies, we can display our advertising on other websites based on your user profile and preferences.

These cookies also store data on how many visitors have seen or clicked on our advertisements in order to optimize advertising campaigns.

IX. Use of highfive

a. Type and purpose of processing

We use cookies from highfivve GmbH, Erika-Mann-Straße 23, 80636 Munich, on our website. On the basis of corresponding contracts, highfivve GmbH enables third parties to set their own cookies on websites that are in the marketing portfolio of highfivve GmbH, or makes data collected using cookies available to third parties. Users can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. This does not mean that a user receives less advertising, but the advertising displayed is just less relevant to them. For each cookie used, highfivve GmbH also provides detailed information about the general purpose of the cookie, the provider and the opt-out options via a software tool. highfivve also enables the user to block or delete individual cookies. You can find more information here. The following types of cookies are used by our partner highfivve GmbH:

(a) Cookies for campaign validation

These are cookies that are used to check whether an advertising campaign was carried out by highfivve GmbH for an advertising customer as instructed. These include cookies from highfivve GmbH and highfivve GmbH's partners that record whether an advertising banner was actually placed on a website at the agreed frequency. This is to ensure compliance with and verification of the specifications agreed with a customer for carrying out advertising campaigns (e.g. time period, area, avoiding multiple sending of the same advertising material to a user).

(b) Cookies to achieve greater targeting accuracy

Cookies from highfivve GmbH are compared with cookies from other service providers in order to increase the probability of a hit in a certain segment (e.g. interest). highfivve GmbH uses the following cookies for such a comparison: Cookies that are set by service providers on behalf of highfivve GmbH in order to analyze tracking behavior (pages accessed by a user); Cookies that highfivve GmbH receives from third parties in order to compare them with its own segmentations; Cookies that partners of highfivve GmbH set to achieve greater targeting accuracy and compare them with their own cookie data. Further data protection information from highfivve GmbH can be found at https://highfivve.com/transparenz/.

b. Legal basis for processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

usage data

websites visited
time spent on the page
interactions with advertising banners
click behavior

device and access data

IP address (anonymized)
device type (e.g. mobile, desktop)
operating system
browser type and version

cookie and tracking data

cookie IDs
tracking IDs
Information about user behavior (e.g. interest in certain topics or products)

location data

Rough location data (e.g. country or city based on IP address)

campaign validation data

Ad frequency (how often an ad was displayed)
time and duration of the advertising display

Data for target group matching & segmentation

Data from comparison with other service providers (e.g. interest profiles)
Information about pages previously visited by the user

d. recipient

The recipients of the data are internal employees of the Organization and Business Development departments and highfivve as the data processor. We have concluded a corresponding data processing agreement for this purpose.

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been given. After this, it will be deleted unless there are statutory retention periods. To contact us in this context, please use the contact details provided at the beginning of this data protection declaration.

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future in the cookie settings.

i. Automated decision-making and profiling

With the help of the tracking tool highfivve, the behavior of visitors to the website can be evaluated and their interests analyzed. To do this, we create a pseudonymous user profile.

X. Use of Cloudflare

a. Type and purpose of processing

We use the service “Cloudflare”. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare offers a globally distributed content delivery network with DNS. Technically, the information transfer between your browser and our website is routed through Cloudflare’s network. This enables Cloudflare to analyze the data traffic between your browser and our website and to serve as a filter between our servers and potentially malicious data traffic from the Internet. Cloudflare can also use cookies for this purpose, but these are only used for the purpose described here. We have concluded a contract processing agreement with Cloudflare. Further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.

b. Legal basis for processing

The integration of Cloudflare is based on your consent in accordance with Art. 6 (1) (a) GDPR.

c. Data categories

Technical connection data

IP address of the user (anonymized)
HTTP header information (e.g. browser type, operating system, referrer URL)
Date and time of the request

device and access data

browser type and version
user's operating system
screen resolution
device type (e.g. mobile or desktop)

network and security data

information about bandwidth usage
detection data to identify and block malicious access
Security and performance data to detect DDoS attacks and other threats

d. recipient

Recipients of the data are internal employees of the Organization department and Cloudflare as data processor.

e. Storage periods

The data will be deleted once the purpose no longer applies or if you withdraw your consent, unless there are statutory retention periods to the contrary. To contact us in this regard, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.

h. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.

XI. Use of Open Street Map

a. Type and purpose of processing

This website includes a map from OpenStreetMap, a free project with the purpose of collecting freely usable geodata and keeping it in a database for use by anyone (open data). In order to display the map, information about the use of this website, including your IP address, is forwarded to OpenStreetMap. These services are operated by the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom, for the OSM community. In order to display the map, information about the use of OSM services is forwarded to OpenStreetMap. In addition, a so-called session cookie is stored on the visitor's computer. You can find details in the "Cookies" section.

b. Legal basis for processing

The legal basis for the integration of OpenStreetMap and the associated data transfer to OpenStreetMap is your consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Technical connection data

user's IP address
Date and time of the request
URL of the page with the embedded map

device and access data

browser type and version
user's operating system
screen resolution
device type (e.g. mobile or desktop)

location data (if enabled)

Exact or approximate location data (if the user allows this in their browser or operating system)

cookie and session data

Session cookie for temporarily storing user settings (e.g. selected map section, zoom level)

d. recipient

Recipients of the data are internal employees of the IT department and OSMF.

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional restrictions on the website.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Revocation of consent

If you do not want OSMF to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or will only be able to use it to a limited extent. You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.

XII. Use of Google Analytics

a. Type and purpose of processing

This website uses Google Analytics, a web analysis service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and saved there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Further related services will then be provided based on the use of the website and the Internet. We also use the Google Signals function. Google Signals are session data from websites and apps that Google links to users who are logged into their Google account and have activated personalized advertising. By linking data with these logged-in users, cross-device reports, cross-device remarketing and the export of cross-device conversions to Google Ads are possible.

b. Legal basis for processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Technical connection data

IP address (shortened/anonymized)
date and time of access
Referrer URL (previously visited page)
loading time of the website

device and access data

device type (desktop, mobile, tablet)
operating system and version
browser type, version and language settings
screen resolution

usage and interaction data

duration of the visit
Pages viewed and click paths
scrolling behavior
Interactions with content (e.g. clicks on buttons, videos)
abandonment rates (page bounces)

location data (if released)

Coarse geographic location data (e.g. country, region, city) based on the IP address

Google Signals (if enabled)

Device combinations and cross-device use
Interest-based categories (e.g. user interests and demographic data such as age and gender, if determined by Google)
Linking with Google account data (only for logged-in users with personalized advertising activated)

cookie and tracking data

Cookie IDs for recognizing visitors
Google Analytics Client ID (anonymous identifier for measuring recurring visits)
Information about campaigns and marketing measures (e.g. user origin: organic search, advertising, direct access)

d. recipient

Employees of the IT and marketing department of their own company

Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, we have concluded standard data protection clauses with Google (Analytics).

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You can prevent cookies from being saved by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available: “Browser Add-On to deactivate Google Analytics”.

i. Automated decision-making and profiling

Using the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and their interests analyzed. To do this, we create a pseudonymous user profile.

XIII. Use of Google Tag Manager

a. Type and purpose of processing

Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which may collect data themselves. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

b. Legal basis for processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Technical connection data (transmitted by the browser)

User's IP address (is only transmitted for technical provision, but is not stored by the Tag Manager itself)
HTTP request data (e.g. browser type, referrer URL, request timestamp)

d. recipient

Recipients of the data are internal employees of the Business Development, IT, Organization and Google departments.

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional restrictions on the website.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

i. Profiling

With the help of the Google Tag Manager tool, the behavior of website visitors can be evaluated and their interests analyzed.

XIV. Use of Meta Pixel

a. Type and purpose of processing

Within our online offering, the so-called "meta pixel" of the social network Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used to analyze, optimize and economically operate our online offering.

With the help of the meta pixel, Facebook is able to determine the visitors to our online offering as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the meta pixel to only display the Facebook ads we place to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the meta pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and do not appear annoying. With the help of the meta pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The meta pixel is integrated by Facebook after you have given your consent and can save a so-called cookie, i.e. a small file, on your device. If you then log in to Facebook or visit Facebook while logged in, your visit to our website will be recorded in your profile. The data collected about you is anonymous to us and therefore does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook for its own market research and advertising purposes. If we transmit data to Facebook for comparison purposes as part of the pixel process, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of making a comparison with the data that is also encrypted by Facebook.

b. Legal basis for processing

The data is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Technical connection data

user's IP address
date and time of the page visit
Referrer URL (previously visited website)
User agent data (browser type, operating system, device type)

device and access data

device type (mobile, tablet, desktop)
operating system and browser version

usage and interaction data

Pages visited within our online offering
Content viewed (e.g. products or services)
Interactions performed (e.g. clicks on buttons or links)
time spent on the website

conversion data

Information about whether a user has performed a specific action on the website after clicking on a Facebook ad (e.g. registration, purchase, submitted contact form)

cookie and tracking data

meta pixel ID
Facebook cookie ID (if the user is logged in to Facebook)
Custom Audience data (information sent to Facebook for targeted advertising)

Data for target group formation and profiling

Interest-based categories (e.g. interests derived from pages visited)
behavior on the website to create custom audiences
Comparison of encrypted data with Facebook

d. recipient

Recipients of the data are internal employees of the Support, Content and Organization departments as well as Meta as the data processor.

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional restrictions on the website.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.

h. Revocation of consent

i. Profiling

With the help of Meta's tool, the behavior of website visitors can be evaluated and their interests analyzed.

XV. Use of Mailjet/Mailchimp

a. Type and purpose of processing

This website uses Mailchimp to send newsletters. The provider is Mailjet SAS (Global HQ), office and postal address in Paris: 4 rue Jules Lefebvre, 75009 Paris, France. Mailjet is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Mailjet's servers. If you do not want Mailjet to analyze your email, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website. Mailjet enables us to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. This allows us to determine, among other things, which links have been clicked particularly often. We can also see whether certain previously defined actions have been carried out after the message was opened/clicked (conversion rate). This allows us to see, for example, whether you have made a purchase after clicking on the newsletter. Detailed information on Mailjet's functions can be found at the following link: https://www.mailjet.de/funktion/. Mailjet's privacy policy can be found at: https://www.mailjet.de/sicherheit-datenschutz/.

b. Legal basis for processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

IP address (shortened/anonymized)

d. recipient

Recipients of your personal data are internal employees and Mailjet as a data processor. We have concluded a data processing contract with Mailjet.

e. Storage periods

f. Legal / contractual requirement

The provision of your personal data is voluntary and based solely on your consent. If you deny access, this may result in functional restrictions on the website.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision-making and profiling

Mailjet also allows us to divide newsletter recipients into different categories (“cluster”). Newsletter recipients can be divided by age, gender or place of residence, for example.

XVI. Online presence in social media

We maintain online presences within social networks in order to inform active users about our services and, if they are interested, to communicate directly via the platforms. We are currently represented in the following networks:

Facebook : https://www.facebook.com/GlampingInfo
Instagram : https://www.instagram.com/glamping.info/
Pinterest : https://pinterest.com/glampinginfo/

All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks offer for embedding the offers on websites.

We have no influence on the data collection and further use by the social networks. We have no knowledge of the extent to which, where and for how long the data is stored, the extent to which the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We therefore expressly point out that the users' data (e.g. personal information, IP address) is stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.

We process the data of users in the social media presences insofar as they contact and communicate with us via, for example, comments or direct messages.

The legal basis for the processing of the user's data is Art. 6 para. 1 lit. b and f GDPR

Facebook / Instagram

You can access the social media networks Facebook and Instagram via external links on our website. All functions in the social media network are offered by Meta Platforms Ireland Ltd. The channels can only be accessed via an external link. If you are logged into Facebook or Instagram with your own profile and access our social media channel, Facebook can assign your visit to your logged-in profile. If you do not want your user account to be assigned to your IP address, please log out of your Facebook/Instagram account before using our website.

For further information on the processing of your data, please refer to Facebook’s privacy policy: https://facebook.com/privacy/explanation and to our data policy “Joint Responsibility Facebook”.

You can access the social media network Pinterest via external links on our website. All functions in the social media network are offered by Pinterest Europe Ltd. The channels can only be accessed via an external link. If you are logged into Pinterest with your own profile and access our social media channel, Pinterest can assign your visit to your logged-in profile. If you do not want your user account to be assigned to your IP address, please log out of your Pinterest account before using our website.

For further information on the processing of your data, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy .

XVII. Processing in the context of a business relationship

a. Type and purpose of processing

We may process the personal data of our customers, prospects, suppliers, vendors and partners for communication, planning, execution of the contractual relationship, marketing, administration and security purposes.

b. Legal basis for processing

The processing of the data provided is based on a legitimate interest (Art. 6 Para. 1 lit. f GDPR) and the performance of the contract (Art. 6 Para. 1 lit. b GDPR)

c. Data categories

contact information (name, email address)

Other necessary information in a project or contractual relationship or information that is provided to us voluntarily, such as personal data relating to orders, payments, inquiries and projects

d. recipient

The recipients of the data are the internal employees of the respective departments and, if applicable, the departments’ contract processors.

e. Retention periods

We delete personal data if the storage of the personal data is no longer necessary for the purposes for which it was collected or processed or to fulfill legal obligations (e.g. HGB, AO).

f. Transfer to third countries

Your personal data may be transferred to third parties based outside the European Union (EU) or the European Economic Area (EEA) who, for example, provide hosting services for us. In order to guarantee the level of data protection in the third country, we have concluded so-called standard data protection clauses with our respective service providers.

g. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.

XVIII. Use of WhatsApp

a. Type and purpose of processing

We are pleased that you are interested in our presence on WhatsApp. We would like to give you an overview of the data we collect, use and store there.

Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on WhatsApp triggers numerous data protection-relevant processing operations. In detail:

If you are logged into your WhatsApp account and visit our social media presence, WhatsApp can assign this visit to your user account. However, your personal data may also be recorded if you are not logged in or do not have an account on WhatsApp. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address. Using the data collected in this way, WhatsApp can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be shown to you inside and outside of WhatsApp. If you have an account on WhatsApp, interest-based advertising can be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing operations on WhatsApp. WhatsApp may therefore carry out additional processing operations. For details, please refer to WhatsApp's terms of use and privacy policy.

b. Legal basis for processing

The processing is carried out in accordance with Art. 6 Para. 1 lit. f. GDPR on the basis of our legitimate interest in the possibility of contacting our customers. The analysis processes initiated by WhatsApp may be based on different legal bases, which must be specified by WhatsApp (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).

c. Data categories

Please refer to WhatsApp’s privacy policy to find out which specific data is collected and how it is used:

Whatsapp: https://www.whatsapp.com/legal/#privacy-policy

d. recipient

employees of their own company

Facebook

e. Storage periods

Once the purpose no longer applies and we no longer use WhatsApp, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.

h. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. If you would like to exercise your right of objection, simply send an email to the contact address above.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.