The following text serves to inform you about the processing of your personal data carried out by us within the scope of our Internet offer.

RESPONSIBLE
Lübeck and Travemünde Marketing GmbH
Holstentorplatz 1
23552 Lübeck
E-mail: info(at)luebeck-tourismus.de
Local court HRB 4540
Managing Director: Christian Martin Lukas

CONTACT DATA PROTECTION OFFICER
data protection(at)luebeck-tourismus.de

WHEN DO WE PROCESS WHICH PERSONAL DATA

We process personal data from you in the following cases:

When you visit our website, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
– IP address of the requesting computer
– Date and time of access
– Name and URL of the retrieved file
– Website from which the access is made (referrer URL)
– Browser used and, if applicable, the operating system of your computer as well as the name of your Internet provider
In addition, we use cookies and analysis services when you visit our website. More information about this can be found in the section “Analysis tools”.
For questions of any kind, we offer you the possibility to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address so that we know from whom the request originates and so that we can answer it. Additional information can be provided voluntarily.
If you wish to send us an application to apply for an advertised position or on your own initiative, we will process the documents and personal data you send us.

For unsolicited applications, we require name, address and other contact details, date and place of birth and nationality) and qualification documents. In addition, you may voluntarily provide us with other data that you believe would be beneficial to establishing an employment relationship.

When you sign up for our newsletter, we collect your email address and your first and last name. The data you provide will be processed.

PURPOSES OF DATA PROCESSING
We use the personal data actively communicated by you only for the respective agreed purpose and only to the extent necessary.

The aforementioned data will be processed by us for the following purposes:

– Ensuring a smooth connection establishment of the website
– Ensuring a comfortable use of our website
– Evaluation of system security and stability
– For other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. b) DSGVO on the basis of a pre-contractual measure. If a contract is made, the data can be entered into our customer support system. The data will not be processed for any other purposes.
Data processing in the context of application situations serves the purpose of establishing and implementing an employment relationship pursuant to. Art. 88 DSGVO in conjunction with § 26 BDSG. In the event of a positive decision, the personal data will enter our personnel file and pursue the purposes of the “employee management” procedure.
Insofar as you have given your consent in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO, we will use your e-mail address to send you our newsletter on a regular basis.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:

You have provided us with your personal data in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO have given express consent to this.
the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
for the disclosure according to Art. 6 para. 1 p. 1 lit. c DSGVO a legal obligation exists.
this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO is necessary for the processing of contractual relationships with you.
Data is only transferred to third countries if you have given us your consent.

DURATION FOR WHICH PERSONAL DATA ARE STORED

Cookies are stored in your browser as so-called session cookies, so that your browser automatically deletes them after you leave the website. The duration of storage in this case follows from the technical functionality of the browser you are using.
Personal data transmitted to us in connection with a contact request on our website will only be stored for the duration of processing the request. If a contract is concluded, the data you provide may be stored in our customer support system for 10 years on a regular basis, unless there is another legal obligation that requires us to store it for a longer period.
Personal data collected in connection with an application is subject to the following storage periods:
– Cancellation: The data will be stored for at least three months. The longest storage period is again a maximum of six months.
– Setting: Our storage periods apply. The information to which you are entitled in this regard will be provided to you when you are hired.
In any case, your personal data provided will only be stored until revoked.
We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion shall be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).

RIGHT OF OBJECTION
If your personal data is collected on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, an e-mail to datenschutz(at)luebeck-tourismus.de is sufficient.

RIGHT OF ACCESS, RECTIFICATION, ERASURE, RESTRICTION
You have the right of access to the personal data concerning you as well as the right to rectification or deletion or to restriction of processing. Furthermore, you have the right to object to the processing.

RIGHT TO DATA PORTABILITY
You have the right to portability of the personal data concerning you.

EXISTENCE OF A RIGHT OF APPEAL TO THE SUPERVISORY AUTHORITY
You have the right to complain to the competent supervisory authority.

PROVISION OF PERSONAL DATA
There is no legal obligation for you to provide personal data.

There is no contractual obligation to provide us with personal data in the course of our business activities (if this is possible anonymously). You are welcome to anonymize them or otherwise remove the personalization.

AUTOMATED DECISION MAKING INCLUDING PROFILING
As a matter of principle, we do not carry out automatic profiling.

However, automated profiling with the aim of assessing personal aspects may occur under certain circumstances, as we are obliged to combat money laundering, terrorist financing and asset-endangering crimes due to legal and regulatory requirements. Data evaluations (including comparison with legally prescribed lists) are also carried out.

USE OF COOKIES
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

Information is stored in the cookie that arises in each case in connection with the specific end device used. This does not mean, however, that we thereby gain direct knowledge of your identity.

The use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site.

On the one hand, in order to optimize user-friendliness, we use temporary cookies that are stored on your terminal device for a specific, defined period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies allow us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies are necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO required.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

GOOGLE FONTS
We use “Google Fonts” on our website. These are fonts of the provider Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – “Google”). We do this in order to be able to load our Internet presence as smoothly and clearly as possible.
For the purpose of display, a connection is established between your browser and the Google server. The content of this communication is the IP address. The legal basis for the above processing operations is Art. 6 para. 1 p. 1 f DSGVO by which we justify our legitimate interest in a uniform presentation.

The possibility of opting out in this regard can be found at:
adssettings.google.com/authenticated. You can also send us your corresponding objection at any time. For more information about Google’s privacy policy, please visit: www.google.com/policies/privacy/

GOOGLE MAPS
To make it easier for you to find us, we have integrated map material from the Google Maps service from Google LLC into our website via an API. In order to be able to display the content in your browser, Google must receive your IP address, because otherwise Google could not provide you with this embedded content.

The legal basis for this data processing is Art. 6 para. 1 b) DSGVO, as the IP address is needed to deliver the content to you. For this processing, our cooperation with Google is based on a joint responsibility agreement pursuant to Article 26 of the GDPR, which can be accessed here.

For more information on data processing by Google, please see Google’s privacy policy at www.google.de/intl/de/policies/privacy/.

ANALYSIS TOOLS
Tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO carried out. With the tracking measures used, we want to ensure on the one hand a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be considered legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics
For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google, Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

– Browser type/version
– Operating system used
– Referrer URL (the previously visited page)
– Host name of the accessing computer (IP address)
– Time of the server request

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing a browser addon (https://tools.google.com/dlpage/gaoptout?hl=de).

Furthermore, Google offers a deactivation option for the most common browsers, which gives you more control over what data is collected and processed by Google. Should you enable this option, no website visit information will be transmitted to Google Analytics. However, activation does not prevent information from being transmitted to us or to other web analytics services we may use. For more information on the deactivation option provided by Google and how to activate this option, please click on the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set that prevents future collection of your data when visiting this website. The opt-out cookie is valid only in this browser and only for our website and is placed on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

*You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: Disable Google Analytics *

Google Adwords Conversion Tracking
In order to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. Google Adwords sets a cookie on your computer if you have accessed our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked through the websites of Adwords customers. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords clients will learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

If you do not wish to participate in the tracking procedure, you can also refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the “www.googleadservices.com” domain. Google’s privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html).

Matomo (formerly Piwik)
We use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose. The information generated by the cookie about website usage is transmitted to our servers and summarized in pseudonymized usage profiles. The information is used to evaluate the use of the website and to enable us to design our website in line with requirements. The information is not passed on to third parties.

In no case will the IP address be associated with other data concerning the user. The IP addresses are anonymized so that an assignment is not possible (IP masking). Your visit to this website is currently recorded by Matomo web analytics. Click here (https://matamo.org/docs/privacy/) to stop your visit from being recorded.

Use of reCAPTCHA
In order to protect input forms on our site, we use the service “reCAPTCHA” of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. The use of this service makes it possible to distinguish whether the corresponding input is of human origin or is misused by automated machine processing. To our knowledge, the referrer URL, the IP address, the behavior of website visitors, information about the operating system, browser and dwell time, cookies, display instructions and scripts, the user’s input behavior and mouse movements in the area of the “reCAPTCHA” checkbox are transmitted to “Google”.

Google uses the information obtained in this way to digitize books and other printed matter and to optimize services such as Google Street View and Google Maps (e.g., house number and street name recognition).

The IP address transmitted as part of “reCAPTCHA” is not merged with other data from Google, unless you are logged into your Google account at the time of using the “reCAPTCHA” plugin. If you want to prevent this transmission and storage of data about you and your behavior on our website by “Google”, you must log out of “Google” before you visit our site or use the reCAPTCHA plugin.

The use of the “reCAPTCHA” service obtained information is in accordance with the Google Terms of Use (https://www.google.com/intl/de/policies/privacy/).

VG WORT
We use the so-called “counting pixel” of the WORT collecting society on our site in the form of the SZM (“Scalable Central Measuring Method”) of the provider INFOnline GmbH (INFOnline GmbH, Forum Bonn Nord, Brühler Str. 9, 53119 Bonn, Germany) to determine statistical key figures relating to the copy probability of texts.

The data obtained in this process is collected anonymously. The collection of access figures uses either a so-called session cookie or a signature created from various automatically transmitted information from your browser to recognize visitors to our site. The IP address is only processed in anonymized form. At no time are individual users identified for this purpose. This procedure is intended to determine the copy probability of individual texts.

wordpress.com STATS
We use the Jetpack component of Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, United States of America, on our site using the technology of Quantcast Corp., 201 Third Street, 2nd Floor, San Francisco, CA 94103, United States of America. With each individual call to our site, data for web analysis is collected through the use of cookies and stored in the USA. Cookies are small text files that are stored locally in the cache of the visitor’s Internet browser to enable the recognition of the visitor’s Internet browser. The IP address is anonymized immediately after processing but before it is stored. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The collection and use of data by the Jetpack component can be objected to with effect for the future if you set an opt-out cookie in your browser via the http://www.quantcast.com/opt-out page. If you should delete all cookies from your browser, the process must be repeated.

Social media
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there.

We would like to point out that in the process, user data may be processed outside the area of the European Union. This could result in risks for users, for example, because it could make it more difficult to enforce users’ rights. With regard to U.S. providers certified under the Privacy Shield, we point out that they thereby undertake to comply with EU data protection standards.

Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles may in turn be used, for example, to serve advertisements within and outside the platforms that presumably correspond to the users’ interests. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

Furthermore, we use social plugins of the social networks Facebook, Twitter and Instagram on our website to make our company better known. The integration of these plugins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible.

The processing of users’ personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 lit. f. DSGVO. If the users are asked by the respective providers of the platforms for consent to the aforementioned data processing, the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

For a detailed description of the respective processing and the opt-out options, please refer to the information of the providers linked below.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data in each case and can take appropriate measures and provide information directly. If you still need help, then you can contact us.
Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy policy/opt-out: instagram.com/about/legal/privacy/.
Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy.

Youtube videos
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells Youtube which pages you are visiting. If you are logged into your Youtube account, Youtube can assign your surfing behavior to you personally. You can prevent this by logging out of your Youtube account beforehand.

When a Youtube video is started, the provider uses cookies that collect information about user behavior.

Those who have deactivated the saving of cookies for the Google Ad program will not have to deal with such cookies when watching Youtube videos. However, Youtube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.

For more information on data protection at “Youtube”, see the provider’s privacy policy at www.google.de/intl/de/policies/privacy/

Facebook
Responsible Party with whom the Service is jointly operated (‘Platform Operator’):

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

In an agreement pursuant to Art. 26 para. 1 GDPR, it has been determined between the joint controllers who fulfills which obligation under the GDPR.

The agreement within the meaning of Art. 26 par. 1 GDPR can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
The platform operator shall make the essential contents of this agreement available to the data subjects.

Privacy contact information:
The contact details for data protection can be found in our privacy policy linked here or the platform operator’s data protection officer can be contacted using the following web form:
https://www.facebook.com/help/contact/540977946302970

Categories of persons concerned:
Both registered and unregistered visitors to our fan page.

Categories of personal data:
Data we process from registered visitors to our Fanpage:
User ID under which you have registered, released profile data (e.g. name details, profession, addresses, contact details, possibly also special categories of personal data such as religious affiliation, health data, etc.).), data arising from the sharing of content, message exchange and communication, data required in the context of contract processing at the request of registered visitors; otherwise, we only process pseudonymized data such as statistics and insights on how people interact with our Fanpage, the posts, pages, videos and other content provided via it (page activities, page views, “like” votes, reach, impressions, link click-throughs, purchases on our website, general demographic, location and interest-related information on age, gender, country, city, language, relationship status, education, family status, occupation, etc.), evaluations of success and success of our Fanpage (e.g., the number of visitors to our Fanpage, the number of visitors to our Fanpage, the number of visitors to our Fanpage, the number of visitors to our Fanpage, etc.).), evaluations of the success and background of our advertisements, other analyses and measurements of “like” votes, comments and shared articles.
The pseudonymized data cannot be merged by us with the corresponding assignment feature (e.g. name information). This makes it impossible for us to identify individual visitors, who thus remain anonymous to us.

Data we process from non-registered visitors to our Fanpage:
Pseudonymous data such as statistics and insights on how people interact with our fan page and advertisements, posts, pages, videos and other content provided through them (page activity, page views, “likes”, reach, impressions, link click-throughs, purchases to our website, general demographic, location and interest information on age, gender, country, city, language, relationship status, education, family status, occupation, etc.), evaluations on the success and background of our advertisements, other analyses and measurements. The pseudonymized data cannot be merged by us with the corresponding assignment feature (e.g. name information). This makes it impossible for us to identify individual visitors, who thus remain anonymous to us.

Data processed by the platform operator about the registered and non-registered visitors of our Fanpage can be found in the following link:
https://www.facebook.com/privacy/explanation

Origin of the data
We receive the data from the data subjects directly or from the platform operator.

Legal basis of data processing
We process the data on the basis of the following legal grounds:

– Art. 6 par. 1 lit. a) GDPR: Consent of the data subjects
– if applicable, Art. 6 para. 1 lit. b) GDPR: Fulfillment of a contract with the data subject or performance of pre-contractual measures at the request of the data subject.
– Art. 6 par. 1 lit. f) DSGVO legitimate interest
Optimization of our fan page and posts
Promoting the sale of our products and services or demand
Simplification of communication and data exchange

We process special categories of personal data, if at all, only on the basis of the following legal grounds:

– Art. 9 par. 2 lit. a) GDPR: Consent of the data subject
– Art. 9 par. 2 lit. e) GDPR: The data subject has manifestly made the personal data public

The legal bases on which the platform operator bases the data processing can be found in the following link:

https://www.facebook.com/about/privacy/legal_bases

If the data subjects are tracked by collecting their data, whether through the use of cookies or similar technologies or by storing the IP address, the platform operator will obtain the consent of the data subjects in advance. In particular, the platform operator is obligated to inform the data subjects for what purposes and on what legal basis the initial call-up of a fan page also generates entries in the so-called local storage for non-registered visitors and whether personal data of non-registered visitors (e.g. IP address or other data that aggregates to personal data) is also used to create profiles.

Data processing purposes
The data will be processed for the following purposes:
– External presentation and advertising
– Communication and data exchange
– Event management
– If necessary, contract initiation and execution

Storage duration
The storage and deletion of the data is the obligation of the platform operator under the agreement within the meaning of Art. 26 par. 1 GDPR. The information on this can be found in the following link:

https://www.facebook.com/privacy/explanation

Recipient categories
Only our employees and service providers who manage our Fanpage and require the data for the above-mentioned purposes have access to the data we process. If the data subjects post their data publicly on our fan page, this data can be accessed by other registered and possibly also non-registered visitors.
The categories of recipients to whom the platform operator discloses the data or enables registered visitors to disclose their data, as well as information on intra-group data exchange, can be found in the following link:

https://www.facebook.com/privacy/explanation

Data transfers to third countries
If the data subjects post their data publicly on our fan page, this data can be accessed worldwide by other registered and possibly also non-registered visitors.

In the context of the operation of our Fanpage, the data is also transmitted to third countries by the platform operator.
Related data transfers to third countries are secured by an adequacy decision of the EU Commission pursuant to Art. 45 GDPR or by appropriate safeguards pursuant to Art. 46 GDPR:

https://www.facebook.com/privacy/explanation

Facebook Inc. is Privacy Shield certified:
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. Due to the agreements on the EU-US Privacy Shield, Facebook must therefore also grant the data subjects various rights, which they can then assert directly against Facebook.

Involved logic and scope of profiling or automated individual decision-making based on the data collected.
If the data subjects are tracked by collecting their data, whether through the use of cookies or similar technologies or through the storage of the IP address, the platform operator shall be liable under the agreement within the meaning of Art. 26 para. 1 DSGVO is obliged to inform about this. In particular, the platform operator is obliged to inform the data subjects of the purposes and legal basis if a session cookie and three cookies with lifetimes of between four months and two years are stored after calling up a subpage within our fan page.

The information on this can be found in the following link:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/policies/cookies/

Rights of the data subjects
The joint controllers must grant the data subjects various rights with regard to the processing of their data, which they are entitled to on the basis of the agreement within the meaning of Art. 26 para. 1 DSGVO directly against the platform operator:

https://www.facebook.com/privacy/explanation

Data subjects have a right to information, correction or deletion of personal data concerning them or a right to restriction of data processing by the controller if certain conditions are met in accordance with Art. 15 to Art. 18 of the GDPR. Data subjects also have the right to revoke their given consent to the processing of their personal data at any time with effect for the future (Art. 7(3) DSGVO). They may also object to the further processing of their data based solely on the legitimate interest of the controller pursuant to Art. 6(1)(f) DSGVO (Art. 21(1) DSGVO), provided that interests worthy of protection in the exclusion of data processing arise for this purpose from their particular personal situation and there are no longer any compelling reasons worthy of protection for the controller to continue processing the data. Insofar as personal data is processed for the purpose of direct marketing, data subjects have the right to object to this processing at any time with effect for the future (Article 21 (2) DSGVO). Insofar as the data processing is based on the consent of the data subject pursuant to Art. 6 (1) (a), Art. 9 (1) (a) GDPR or pursuant to Art. 6 (1) (b) GDPR on a contract with the data subject, and is carried out with the aid of automated processes, data subjects may, pursuant to Art. 20 (1) GDPR, request to receive the personal data stored about them in a structured, common and machine-readable format, or to have it transferred to a third party designated by the data subject.

In principle, data subjects have the right not to be subject to automated individual decision-making pursuant to Art. 22 para. 1 GDPR. If such an automated individual decision pursuant to Art. 22 para. 2 lit. a) to c) GDPR is permitted, data subjects are granted the following rights pursuant to Art. 22 para. 3 GDPR: right to express one’s point of view, right to object to the intervention of a person by the controller, right to challenge the automated individual decision (right to challenge).

Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data violates the GDPR, Art. 77 GDPR. The supervisory authority responsible for the platform operator is:

Data Protection Commission
21 Fitzwilliam Square, Dublin 2
D02 RD28, Ireland
Web address: gdprandyou.ie/contact-us/

Twitter
Our website contains plugins of the short message network of Twitter Inc. (Twitter) integrated. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you call up a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while logged into your Twitter account, you can link the contents of our pages on your Twitter profile. This allows Twitter to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter.

If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account. For more information, please see Twitter’s privacy policy (https://twitter.com/privacy).

Instagram
Our website also uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.

The information will also be published on your Instagram account and shown to your contacts there.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

For more information, please see Instagram’s privacy policy (https://help.instagram.com/155833707900388).

Pinterest
Our website uses plug-ins of the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”). The different logos containing the plug-in (e.g. “Pin-it-Button”) can be viewed at the following link: business.pinterest.com/pin-it-button/
If you call up a corresponding page of our website that contains such a plug-in, a link is established between your computer and the servers of Pinterest and the plug-in is displayed on the page by notifying your browser. Your IP address and the information about which of our pages you have visited are transmitted to the Pinterest server in the USA. This applies regardless of whether you are registered or logged in to Pinterest. Transmission also takes place for users who are not registered or logged in.
If you are also a Pinterest member and logged in to Pinterest at the time you use the plug-in, the information collected about your visit to the site will be linked to your Pinterest account and disclosed to other users. Also in the case of interactions that are possible with the various Pinterest plug-ins, the corresponding information about you is collected and transmitted to Pinterest and stored. If you do not want Pinterest to link and merge the information with the data of your Pinterest account, you must log out of Pinterest before visiting our website. For more information on the collection and use of data by Pinterest, please visit https://about.pinterest.com/de/privacy-policy.
Xing
We use components of the XING.com network on our site. These components are a service of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

With each individual call-up of our website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from XING.

To our knowledge, XING does not store any personal data of the user about the call-up of our website. XING also does not store IP addresses. In addition, there is also no evaluation of usage behavior via the use of cookies in connection with the “XING Share button”. For more information, please refer to the privacy policy for the XING Share button (https://www.xing.com/app/share?op=data_protection).

LinkedIn
We use components of the LinkedIn network on our site. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With each individual call-up of our website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from LinkedIn.

This process informs LinkedIn which specific page of our website is currently being visited. If you click the LinkedIn “Recommend Button” while logged into your LinkedIn account, you can link the content of our pages on your LinkedIn profile. This enables LinkedIn to associate the visit to our pages with your LinkedIn user account.

We have no influence on the data that LinkedIn collects through this, nor on the scope of this data collected by LinkedIn. We also have no knowledge of the content of the data transmitted to LinkedIn. Details on data collection by LinkedIn as well as your rights and setting options can be found in LinkedIn’s privacy policy (http://www.linkedin.com/legal/privacy-policy).

WhatsApp
WhatsApp is an instant messaging service provided by WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041; USA. When you contact us via WhatsApp, you automatically send us your phone number. We will also see your WhatsApp username.
Please note that the confidentiality and data security of instant messaging services is not guaranteed. If you have installed and use WhatsApp on your smartphone or mobile device, you thereby agree to WhatsApp’s terms and conditions, over which we have no control. These include, but are not limited to, that you are WhatsApp Inc. Grant access to your phone number and contacts stored on your mobile device. Likewise, data is stored on servers of WhatsApp Inc. stored that are not subject to European data protection law. We are not liable for any damage caused by the use of the respective platforms. We have no control over the data that WhatsApp collects, nor over the scope of this data collected by WhatsApp. We also have no knowledge of the content of the data transmitted to WhatsApp. Details on data collection by WhatsApp as well as your rights and settings options can be found in WhatsApp’s privacy policy (http://www.whatsapp.com/legal/?l=de).

DATA SECURITY
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

UPDATE AND AMENDMENT OF THIS PRIVACY STATEMENT
This privacy policy is currently valid and has the status November 2019.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current data protection declaration on the website at any time.