Data protection

The following text serves to inform you about the processing of your personal data by us within the framework of our website.

RESPONSIBLE PARTY:
Lübeck und Travemünde Marketing GmbH,
Holstentorplatz 1,
23552 Lübeck,
Germany, Email: info(at)luebeck-tourismus.de
, Commercial Register: HRB 4540,
Managing Director: Christian Martin Lukas

CONTACT DATA PROTECTION OFFICER
datenschutz(at)luebeck-tourismus.de

WHEN DO WE PROCESS WHICH PERSONAL DATA?

We process your personal data in the following cases:

1. When you visit our website, your browser automatically sends information to our website's server. This information is temporarily stored in a log file. The following information is collected automatically and stored until it is automatically deleted:
   • IP address of the requesting computer
   • Date and time of access
   • Name and URL of the accessed file
   • Website from which the access originated (referrer URL)
   • Browser used and, if applicable, your computer's operating system and the name of your internet service provider.
   We also use cookies and analytics services when you visit our website. You can find more information about this under "Analytics Tools".
2. For any questions, you can contact us using the form provided on our website. A valid email address is required so we know who is contacting us and can respond. Providing additional information is optional.
3. If you wish to send us an application for a vacant position or to submit a speculative application, we will process your submitted documents and personal data.

For unsolicited applications, we require your name, address and other contact details, date and place of birth, and nationality, as well as qualification documents. You may also voluntarily provide us with further information that you believe would be beneficial in establishing an employment relationship.

4. When you subscribe to our newsletter, we collect your email address, as well as your first and last name. The data you provide will be processed.

PURPOSES OF DATA PROCESSING
We use the personal data you actively provide only for the agreed purpose and only to the extent necessary.

1. We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring comfortable use of our website
• Evaluating system security and stability
• For other administrative purposes.
The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Our legitimate interest arises from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about your identity.

2. Data processing for the purpose of contacting us is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter b) GDPR on the basis of a pre-contractual measure. If a contract is concluded, the data may be included in our customer service system. The data will not be processed for any other purposes.
3. Data processing in the context of job applications serves the purpose of establishing and carrying out an employment relationship in accordance with Article 88 GDPR in conjunction with Section 26 BDSG. If the application is successful, the personal data will be included in our personnel file and used for the purposes of employee administration.
4. If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR, we will use your email address to send you our newsletter regularly.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only disclose your personal data to third parties if:

1. You have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
2. The transfer is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.
3. There is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR.
4. This is legally permissible and necessary for the performance of our contract with you, in accordance with Article 6(1)(b) GDPR.
   Data will only be transferred to third countries if you have given us your consent.

DURATION FOR WHICH PERSONAL DATA IS STORED

1. Cookies are stored in your browser as so-called session cookies, meaning your browser automatically deletes them after you leave the website. The storage duration in this case depends on the technical functionality of the browser you are using.
2. Personal data submitted to us in connection with a contact request on our website will only be stored for the duration of processing the request. If a contract is concluded, the data you provide may be stored in our customer service system for 10 years, unless there is another legal obligation that requires us to store it for a longer period.
3. The personal data collected in connection with an application is subject to the following retention periods:
   • Rejection: The data will be stored for a minimum of three months. The maximum retention period is six months.
   • Hiring: Our standard retention periods apply. Information regarding these periods will be provided to you upon hiring.
4. Your personal data will only be stored until you withdraw your consent.
   Please note that we will delete your data if its storage is unlawful (in particular, if the data is incorrect and cannot be corrected). Blocking will replace deletion if legal or factual obstacles prevent it (for example, special retention obligations due to commercial and tax law requirements).

RIGHT TO OBJECT
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are grounds relating to your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring you to specify a particular situation.
If you wish to exercise your right to withdraw consent or object, simply send an email to datenschutz(at)luebeck-tourismus.de

RIGHT TO INFORMATION, RECTIFICATION, ERASURE, RESTRICTION
You have the right to information about your personal data, as well as the right to rectification, erasure, or restriction of processing. Furthermore, you have the right to object to the processing.

RIGHT TO DATA PORTABILITY
You have the right to data portability of your personal data.

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the competent supervisory authority.

PROVISION OF PERSONAL DATA
You are under no legal obligation to provide personal data.

There is no contractual obligation to provide us with personal data in the course of our business activities (if anonymity is possible). You are welcome to anonymize this data or otherwise remove its personal information.

AUTOMATED DECISION-MAKING INCLUDING PROFILING
We do not engage in automated profiling as a matter of principle.

However, automated profiling for the purpose of evaluating personal aspects may occur under certain circumstances, as we are legally and regulatory obligated to combat money laundering, terrorist financing, and asset-endangering crimes. This also involves data analysis (including comparison with legally mandated lists).

USE OF COOKIES
We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device used. However, this does not mean that we thereby gain direct knowledge of your identity.

We use cookies to make your experience on our website more enjoyable. For example, we use session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted when you leave our site.

On the one hand, we use temporary cookies to optimize user-friendliness. These cookies are stored on your device for a specific, predetermined period. When you revisit our site to use our services, it is automatically recognized that you have already been here and what entries and settings you have made, so you don't have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you. These cookies enable us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period. The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to prevent cookies from being stored on your computer or to always prompt you before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.

Consent Management Platform ConsentManager:
To request consent on our website for the processing of your device information and personal data using cookies or other tracking technologies, we use the "ConsentManager" consent tool from "consentmanager AB" (Håltegelvägen 1b, 72348 Västerås, Sweden). With "ConsentManager," you have the option to consent to or refuse the processing of your device information and personal data using cookies or other tracking technologies for the purposes listed in "ConsentManager." Such processing purposes may include, for example, the integration of external elements, integration of streaming content, statistical analysis, audience measurement, personalized product recommendations, and personalized advertising. Using "ConsentManager," you can grant or refuse your consent for all processing purposes, or grant or refuse your consent for individual purposes or individual third-party providers. You can also change your settings at any time. The purpose of integrating "ConsentManager" is to allow users of our website to decide whether to allow cookies and similar functionalities, and to offer them the option to change previously made settings while continuing to use our website. When using "ConsentManager," we process personal data and information about the devices used.

Your data will also be transmitted to "ConsentManager". Information about your settings will also be stored on your device. The legal basis for this processing is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, insofar as the processing serves to fulfill the legally mandated documentation requirements for obtaining consent. Otherwise, Article 6(1)(f) GDPR is the relevant legal basis. Our legitimate interests in this processing lie in storing user settings and preferences regarding the use of cookies and in evaluating consent rates. Thirteen months after you configure your settings, you will be asked for your consent again. These settings will then be stored again for this period, unless you delete the information about your user settings yourself beforehand.

You can object to the processing of your personal data if the processing is based on Article 6(1)(f) GDPR. Your right to object exists if there are grounds relating to your particular situation. You can send us your objection using the contact details provided in the "Controller" section.

GOOGLE FONTS
We use "Google Fonts" on our website. These are fonts provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – "Google"). We do this to ensure our website loads as smoothly and clearly as possible.
For display purposes, a connection is established between your browser and Google's servers. The content of this communication is your IP address. The legal basis for the aforementioned processing operations is Article 6 Paragraph 1 Sentence 1 f GDPR, which justifies our legitimate interest in a uniform presentation.

You can opt out of this at:
adssettings.google.com/authenticated. You can also send us your objection at any time. Further information about Google's privacy policy can be found at: www.google.com/policies/privacy/

GOOGLE MAPS
To make it easier for you to find us, we have integrated map data from Google Maps, a service provided by Google LLC, into our website via an API. In order to display the content in your browser, Google needs to receive your IP address; otherwise, Google would not be able to deliver this embedded content to you.

The legal basis for this data processing is Article 6(1)(b) GDPR, as the IP address is required to deliver the content to you. In this processing, we collaborate with Google on the basis of a joint controllership agreement pursuant to Article 26 GDPR, which can be accessed here.

Further information on data processing by Google can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

ANALYSIS TOOLS
Tracking Tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures we use, we aim, on the one hand, to ensure the needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our services for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

1. Google Analytics:
   For the purpose of tailoring our website to user needs and continuously optimizing it, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as...

• Browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing computer (IP address)
• Time of the server request

are transmitted to a Google server in the USA and stored there. This information is used to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of these websites. This information may also be transferred to third parties if required to do so by law, or if third parties process this data on Google's behalf. Under no circumstances will your IP address be merged with other data held by Google. IP addresses are anonymized so that assignment is not possible (IP masking).

You can prevent the installation of cookies by adjusting your browser software settings; however, please note that in this case you may not be able to fully utilize all the functions of this website.

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de)

Furthermore, Google offers an opt-out option for most common browsers, giving you more control over which data is collected and processed by Google. If you activate this option, no information about your website visit will be transmitted to Google Analytics. However, activation does not prevent information from being transmitted to us or to other web analytics services we may use. You can find more information about the opt-out option provided by Google, as well as instructions on how to activate it, via the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking this link. This will set an opt-out cookie that prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

*You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to this website: Disable Google Analytics *

2. Google AdWords Conversion Tracking:
   To statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. Google AdWords places a cookie on your computer if you have reached our website via a Google ad.

These cookies expire after 30 days and are not used for personal identification. If a user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page.

Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users.

If you do not wish to participate in the tracking process, you can also refuse the necessary placement of a cookie – for example, via a browser setting that generally deactivates the automatic placement of cookies. You can also deactivate cookies for conversion tracking by configuring your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).

3. Matomo (formerly Piwik):
   We use the open-source software Matomo to analyze and statistically evaluate website usage. Cookies are used for this purpose. The information generated by the cookie about website usage is transmitted to our servers and aggregated in pseudonymized user profiles. This information is used to evaluate website usage and to enable us to tailor our website to user needs. The information is not shared with third parties.

Under no circumstances will the IP address be linked to other data concerning the user. The IP addresses are anonymized so that identification is impossible (IP masking). Your visit to this website is currently being recorded by Matomo web analytics. Click here (https://matamo.org/docs/privacy/) to opt out of tracking.

4. Use of reCAPTCHA:
   To protect input forms on our website, we use the "reCAPTCHA" service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". This service helps distinguish between input from a human and input from automated, malicious software. To our knowledge, the referrer URL, IP address, website visitor behavior, information about the operating system, browser and session duration, cookies, display instructions and scripts, user input behavior, and mouse movements within the "reCAPTCHA" checkbox area are transmitted to Google.

Google uses the information obtained in this way, among other things, to digitize books and other printed materials, as well as to optimize services such as Google Street View and Google Maps (e.g., house number and street name recognition).

The IP address transmitted as part of "reCAPTCHA" is not merged with other Google data unless you are logged into your Google account at the time of using the "reCAPTCHA" plugin. If you wish to prevent this transmission and storage of data about you and your behavior on our website by Google, you must log out of Google before visiting our site or using the reCAPTCHA plugin.

Information obtained through the use of the "reCAPTCHA" service is subject to Google's Terms of Service (https://www.google.com/intl/de/policies/privacy/).

5. VG WORT
   We use the so-called "tracking pixel" of the collecting society VG WORT on our website in the form of the SZM ("Scalable Central Measurement Method") of the provider INFOnline GmbH (INFOnline GmbH, Forum Bonn Nord, Brühler Str. 9, 53119 Bonn) to determine statistical indicators regarding the probability of texts being copied.

The data obtained is collected anonymously. To recognize visitors to our site, we use either a session cookie or a signature created from various automatically transmitted information from your browser. The IP address is only processed anonymously. At no time are individual users identified. This process is intended to determine the likelihood of copying individual texts.

6. wordpress.com STATS
   We use the Jetpack component from Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, United States of America, on our website, employing technology from Quantcast Corp., 201 Third Street, 2nd Floor, San Francisco, CA 94103, United States of America. Each time our website is accessed, data for web analytics is collected using cookies and stored in the USA. Cookies are small text files that are stored locally in the cache of the visitor's internet browser to enable recognition of the visitor's browser. The IP address is anonymized immediately after processing but before being stored. You can prevent the installation of cookies by adjusting your browser settings or delete cookies that have already been stored; however, please note that in this case you may not be able to fully utilize all the functions of our website.

You can object to the collection and use of data by the Jetpack component with effect for the future by setting an opt-out cookie in your browser via the page http://www.quantcast.com/opt-out. If you delete all cookies in your browser, this process must be repeated.

7. Social Media
   We maintain online presences within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services.

Please note that user data may be processed outside the European Union. This may pose risks for users, as it could, for example, make it more difficult to enforce their rights. With regard to US providers certified under the Privacy Shield, we would like to point out that they are thereby obligated to comply with EU data protection standards.

Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created based on user behavior and the resulting interests of the users. These user profiles can then be used, for example, to place advertisements within and outside the platforms that presumably correspond to the users' interests. For these purposes, cookies are generally stored on users' computers, in which the user behavior and interests are stored. Furthermore, data can also be stored in the user profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

Furthermore, we use social plugins from the social networks Facebook, Twitter, and Instagram on our website to increase awareness of our company. We integrate these plugins using the so-called two-click method to best protect visitors to our website.

The processing of users' personal data is based on our legitimate interests in effectively informing and communicating with users, pursuant to Article 6(1)(f) GDPR. If users are asked by the respective platform providers for their consent to the aforementioned data processing, the legal basis for the processing is Article 6(1)(a) and Article 7 GDPR.

For a detailed description of the respective processing and the objection options (opt-out), we refer to the information provided by the providers linked below.

Regarding requests for information and the assertion of user rights, we would like to point out that these can be most effectively addressed directly with the providers. Only the providers have access to user data and can take appropriate action and provide information directly. Should you still require assistance, you can contact us.
Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) – Privacy Policy/Opt-Out: instagram.com/about/legal/privacy/.
Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/Opt-Out: https://about.pinterest.com/de/privacy-policy.

1. YouTube Videos:
   We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube's servers is established. This informs YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.

Anyone who has deactivated cookies for the Google Ads program will not encounter such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block cookies in your browser.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at www.google.de/intl/de/policies/privacy/

2. Facebook
   entity responsible for jointly operating the service (‘platform operator’):

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbor
Dublin 2 Ireland

In an agreement pursuant to Art. 26 para. 1 GDPR, the joint controllers determined who fulfills which obligation under the GDPR.

The agreement pursuant to Article 26(1) GDPR can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
The platform operator will provide the essential contents of this agreement to the data subjects.

Contact details for data protection:
Contact details for data protection can be found in our privacy policy linked here, or the data protection officer of the platform operator can be contacted via the following web form:
https://www.facebook.com/help/contact/540977946302970

Categories of affected persons:
Both registered and unregistered visitors to our fan page on the social network.

Categories of personal data:
Data that we process from registered visitors to our fan page:
user ID under which you registered, shared profile data (e.g. name, profession, addresses, contact details, possibly also special categories of personal data such as religious affiliation, health data, etc.), data generated when sharing content, exchanging messages and communicating, data required in the context of contract processing at the request of registered visitors; Otherwise, we only process pseudonymized data such as statistics and insights into how our fan page, the posts, pages, videos, and other content provided on it are interacted with (page activity, page views, "likes," reach, impressions, link click-throughs, purchases on our website, general demographic, location-based, and interest-related information such as age, gender, country, city, language, relationship status, education, family status, occupation, etc.), evaluations of the success and background of our advertisements, and other analyses and measurements of "likes," comments, and shared articles.
We cannot link this pseudonymized data with the corresponding identifying information (e.g., names). Therefore, it is not possible for us to identify individual visitors, who thus remain anonymous to us.

Data we process from unregistered visitors to our fan page:
Pseudonymized data such as statistics and insights into how our fan page and advertisements, the posts, pages, videos, and other content provided through it are interacted with (page activity, page views, "likes," reach, impressions, link click-throughs, purchases on our website, general demographic, location-based, and interest-related information such as age, gender, country, city, language, relationship status, education, family status, occupation, etc.), evaluations of the success and background of our advertisements, and other analyses and measurements. We cannot link the pseudonymized data to the corresponding identifying information (e.g., names). Therefore, it is not possible for us to identify individual visitors, who thus remain anonymous to us.

Data processed by the platform operator about registered and unregistered visitors to our fan page can be found at the following link:
https://www.facebook.com/privacy/explanation

Origin of the data:
We receive the data directly from the data subjects or from the platform operator.

Legal basis for data processing
We process the data on the basis of the following legal grounds:

• Article 6(1)(a) GDPR: Consent of the data subject
• Where applicable, Article 6(1)(b) GDPR: Performance of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject
• Article 6(1)(f) GDPR: Legitimate interest
Optimization of our fan page and posts
Promotion of sales of our products and services or demand
Simplification of communication and data exchange

We process special categories of personal data, if at all, only on the basis of the following legal grounds:

• Article 9(2)(a) GDPR: Consent of the data subject
• Article 9(2)(e) GDPR: The data subject has manifestly made the personal data public

The legal basis on which the platform operator bases its data processing can be found at the following link:

https://www.facebook.com/about/privacy/legal_bases

If data subjects are tracked through the collection of their data, whether through the use of cookies or similar technologies, or through the storage of their IP address, the platform operator will obtain the data subjects' consent beforehand. In particular, the platform operator is obligated to inform data subjects about the purposes and legal basis for the initial access of a fan page, even for unregistered visitors, which generates entries in so-called local storage, and whether personal data of unregistered visitors (e.g., IP address or other data that can be aggregated to form personal data) is also used to create profiles.

Purposes of data processing:
The data is processed for the following purposes:
• Public relations and advertising
• Communication and data exchange
• Event management
• Contract initiation and execution, if applicable

Retention Period:
The storage and deletion of data is the responsibility of the platform operator in accordance with the agreement pursuant to Article 26(1) GDPR. Further information can be found at the following link:

https://www.facebook.com/privacy/explanation

Categories of Recipients
: Only our employees and service providers who manage our fan page and require the data for the aforementioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, it is accessible to other registered and potentially also unregistered visitors.
The categories of recipients to whom the platform operator discloses the data or allows registered visitors to disclose their data, as well as information on intra-group data exchange, can be found at the following link:

https://www.facebook.com/privacy/explanation

Data transfers to third countries:
If the persons concerned post their data publicly on our fan page, this data can be accessed worldwide by other registered and possibly also unregistered visitors.

As part of operating our fan page, data is also transferred to third countries by the platform operator.
These data transfers to third countries are secured by an adequacy decision of the EU Commission pursuant to Art. 45 GDPR or by appropriate safeguards pursuant to Art. 46 GDPR.

https://www.facebook.com/privacy/explanation

Facebook Inc. is Privacy Shield certified:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. Due to the EU-US Privacy Shield agreements, Facebook must therefore grant data subjects various rights, which they can then assert directly against Facebook.

The logic involved and the scope of profiling or automated individual decision-making based on the collected data:
If data subjects are tracked by collecting their data, whether through the use of cookies or similar technologies or by storing their IP address, the platform operator is obligated to inform them of this in accordance with Article 26(1) of the GDPR. In particular, the platform operator is obligated to inform data subjects of the purposes and legal basis if, after accessing a subpage within our fan page, a session cookie and three cookies with lifespans between four months and two years are stored.

Further information can be found at the following links:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/policies/cookies/

Rights of data subjects:
The joint controllers must grant data subjects various rights regarding the processing of their data, which they can assert directly against the platform operator on the basis of the agreement pursuant to Art. 26 para. 1 GDPR:

https://www.facebook.com/privacy/explanation

Under certain conditions, data subjects have the right, pursuant to Articles 15 to 18 of the GDPR, to access, rectify, or erase their personal data, or to restrict its processing by the controller. Data subjects also have the right to withdraw their consent to the processing of their personal data at any time with effect for the future (Article 7(3) GDPR). Furthermore, they may object to the further processing of their data based solely on the legitimate interests of the controller pursuant to Article 6(1)(f) GDPR (Article 21(1) GDPR), provided that their particular situation gives rise to legitimate interests in preventing the data processing and the controller no longer has compelling legitimate grounds for the further processing. If personal data is processed for direct marketing purposes, data subjects have the right to object to this processing at any time with effect for the future (Article 21(2) GDPR). If the data processing is based on the consent of the data subject pursuant to Art. 6 para. 1 lit. a), Art. 9 para. 1 lit. a) GDPR or on a contract with the data subject pursuant to Art. 6 para. 1 b) GDPR, and is carried out using automated procedures, the data subjects may, pursuant to Art. 20 para. 1 GDPR, request to receive the personal data stored about them in a structured, commonly used and machine-readable format, or to have this data transmitted to a third party designated by the data subject.

In principle, data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, pursuant to Article 22(1) GDPR. Where such automated processing is lawful pursuant to Article 22(2)(a) to (c) GDPR, data subjects are granted the following rights pursuant to Article 22(3) GDPR: the right to express their point of view, the right to object to processing and obtain human intervention on the part of the controller, and the right to contest the decision based solely on automated processing (right to contest).

Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they believe that the processing of their personal data infringes the General Data Protection Regulation (GDPR), Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission
21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland
Web address: gdprandyou.ie/contact-us/

Meta Pixel:
We use the Facebook meta pixel on our website www.luebeck-zwischenzeilen.de zwischenzeilen The meta pixel is a JavaScript code implemented on our website that loads a collection of functions allowing Facebook to track your user behavior if you have accessed our website via Facebook ads. For example, if you activate a service on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies allow Facebook to match your user data (such as IP address, user ID) with the data in your Facebook account. The collected data is anonymous to us and cannot be viewed; it is only used for advertising purposes. If you are logged into your Facebook account, your visit to our website will be automatically associated with your Facebook user account.

We use the meta pixel to offer our services only to people who are genuinely interested in them. The meta pixel allows us to better tailor our advertising to your preferences and interests. For example, Facebook users who have opted in to personalized advertising will see relevant ads. Facebook also uses the collected data for its own analytics and advertising purposes.

Below is an example overview of the cookies that could be set by integrating meta-pixels. Which cookies are actually set depends on your user behavior on our website.

• Name: _fbp
• Value: fb.1.1568287647279.257405483-6331700748430-7
• Purpose: This cookie is used by Facebook to display advertising products.
• Expiry date: after 3 months

• Name: fr
• Value: 0aPf312HOS5Pboo2r..Bdeiuf…1.0.Bdeiuf.
• Purpose: This cookie is used to ensure the meta pixel functions technically.
• Expiry date: after 3 months

• Name: comment_author_50ae8267e2bdf1253ec1a5769f48e062331700748430
• Value: Author's name
• Purpose: This cookie stores the text and name of a user who leaves a comment, for example.
• Expiry date: after 12 months

• Name: comment_author_url_50ae8267e2bdf1253ec1a5769f48e062
• Value: https%3A%2F%2Fwww.testseite…%2F (Author's URL)
• Purpose: This cookie stores the URL of the website that the user enters in a text field on our website.
• Expiry date: after 12 months

• Name: comment_author_email_50ae8267e2bdf1253ec1a5769f48e062
• Value: Author's email address
• Purpose: This cookie stores the user's email address if they have provided it on the website.
• Expiry date: after 12 months

Note: The cookies mentioned above relate to individual user behavior. Facebook is responsible for modifying and expanding cookies.

If you are logged into Facebook, you can change your ad settings yourself at https://www.facebook.com/ads/settings. If you are not a Facebook user, you can generally manage your online behavioral advertising at https://www.youronlinechoices.com/de/praferenzmanagement/ . There you have the option to deactivate or activate providers.

Facebook also processes your data in the USA. Facebook, or rather Meta Platforms, is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data of EU citizens to the USA. You can find more information at https://commission.europa.eu/document/fa09cbaddd7d-4684-ae60-be03fcb0fddf_en .

Furthermore, Facebook uses so-called Standard Contractual Clauses (Article 46, paragraphs 2 and 3 of the GDPR). Standard Contractual Clauses (SCCs) are template agreements provided by the European Commission and are designed to ensure that your data complies with European data protection standards even when it is transferred to and stored in third countries (such as the USA). Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Facebook commits to maintaining European data protection standards when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the European Commission. You can find the decision and the corresponding Standard Contractual Clauses here, among other places: https://eurlex.europa.eu/eli/dec_impl/2021/914/oj?locale=de 

Facebook's data processing terms, which refer to the standard contractual clauses, can be found at https://www.facebook.com/legal/terms/dataprocessing .

If you would like to learn more about Facebook's privacy practices, we recommend that you consult the company's own data policy at https://www.facebook.com/privacy/policy .

3. Twitter:
   Our website integrates plugins from the microblogging network Twitter Inc. (Twitter). You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter then receives the information that you have visited our site with your IP address. If you click the Twitter "tweet" button while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our site with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Twitter.

If you do not want Twitter to be able to associate your visit to our pages with your Twitter account, please log out of your Twitter account. Further information can be found in Twitter's privacy policy (https://twitter.com/privacy).

4. Instagram
   Our website also uses social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are identified by an Instagram logo, for example in the form of an “Instagram camera”.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The plugin's content is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information will also be published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website.

Further information can be found in Instagram's privacy policy (https://help.instagram.com/155833707900388).

5. Pinterest:
   Our website uses plugins from the social network Pinterest, operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). You can view the various logos included in the plugin (e.g., the "Pin it" button) at the following link: business.pinterest.com/pin-it-button/.
   When you visit a page on our website containing such a plugin, a connection is established between your computer and Pinterest's servers, and the plugin is displayed on the page by sending a message to your browser. In this process, both your IP address and information about which of our pages you have visited are transmitted to Pinterest's servers in the USA. This applies regardless of whether you are registered with or logged into Pinterest. Data is transmitted even for unregistered or logged-out users.
   Furthermore, if you are a Pinterest member and logged into Pinterest while using the plugin, the information collected about your visit to our website will be linked to your Pinterest account and shared with other users. Information about any interactions you have with the various Pinterest plugins will also be collected, transmitted to Pinterest, and stored. If you do not want Pinterest to link and combine this information with your Pinterest account data, you must log out of Pinterest before visiting our website. For more information about Pinterest's data collection and use, please visit https://about.pinterest.com/de/privacy-policy
6. Xing:
   We use components of the XING.com network on our website. These components are a service of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Each time you access our website, which is equipped with such a component, this component causes your browser to download a corresponding representation of the component from XING.

To our knowledge, XING does not store any personal data of users when they visit our website. XING also does not store IP addresses. Furthermore, no analysis of user behavior takes place through the use of cookies in connection with the "XING Share Button". You can find further information in the privacy policy for the XING Share Button (https://www.xing.com/app/share?op=data_protection).

7. LinkedIn:
   We use components of the LinkedIn network on our website. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access a page on our website that contains such a component, this component causes your browser to download a corresponding representation of the component from LinkedIn.

This process informs LinkedIn which specific page of our website you are currently visiting. If you click the LinkedIn "Recommend" button while logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to associate your visit to our pages with your LinkedIn user account.

We have no control over the data that LinkedIn collects through this process, nor over the scope of this data collection. We also have no knowledge of the content of the data transmitted to LinkedIn. Details regarding data collection by LinkedIn, as well as your rights and settings options, can be found in LinkedIn's privacy policy (http://www.linkedin.com/legal/privacy-policy).

8. WhatsApp
   is an instant messaging service provided by WhatsApp Inc., 650 Castro Street, Suite 120-219, Mountain View, California, 94041, USA. When you contact us via WhatsApp, you automatically transmit your phone number to us. We also see your WhatsApp username.
   Please note that the confidentiality and data security of instant messaging services cannot be guaranteed. By installing and using WhatsApp on your smartphone or mobile device, you agree to WhatsApp's terms and conditions, over which we have no control. These include, among other things, granting WhatsApp Inc. access to your phone number and the contacts stored on your mobile device. Data is also stored on WhatsApp Inc. servers, which are not subject to European data protection law. We are not liable for damages resulting from the use of these platforms. We have no control over the data that WhatsApp collects, nor over the scope of this data collection. We also have no knowledge of the content of the data transmitted to WhatsApp. Details regarding data collection by WhatsApp, as well as your rights and settings options, can be found in WhatsApp's privacy policy (http://www.whatsapp.com/legal/?l=de).

DATA SECURITY
We use the widely used SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser during your visit to our website. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognize whether an individual page of our website is transmitted in encrypted form by the closed padlock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

UPDATES AND CHANGES TO THIS PRIVACY POLICY
This privacy policy is currently valid and was last updated in November 2019.

Due to the ongoing development of our website and related services, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed from our website at any time.

*You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to this website: Disable Google Analytics *