The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Healthy Vulkaneifel GmbH
Leopoldstr. 9a
54550 Daun
E-mail: info(at)gesundland-vulkaneifel.de
Tel.: +49 6592 951 370
Privacy policy of GesundLand Vulkaneifel GmbH
Status: March 30, 2022
We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of GesundLand Vulkaneifel GmbH, Daun (hereinafter referred to as "GesundLand Vulkaneifel"). This privacy policy applies to your use of our websites and our fan pages. The use of our website is generally possible without any indication of personal data. However, if a data subject wants to use special services of our enterprise via our website, processing of personal data could become necessary. If the processing of personal data is necessary and if there is no legal basis for such processing, we will generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to us. By means of this data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this data protection declaration.
As the controller, the GesundLand Vulkaneifel GmbH, Daun has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can always be vulnerable to security risks, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
1 Definitions
This privacy policy is based on the terms used in the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain terminology in advance.
We use the following terms, among others, in this Privacy Policy:
a) personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) person concerned
Data subject is any identified or identifiable natural person whose personal data are processed by the controller.
c) Processing
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
e) Controller or person responsible for processing
The controller or controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
f) Processor
Processor means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
g) Recipient
A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.
h) Third party
Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
i) Consent
Consent shall mean any freely given indication of the data subject's wishes for the specific case in an informed and unambiguous manner, in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.
2 Name and address of the controller
The responsible person in the sense of Art. 4 No. 7 DS-GVO is:
GesundLand Vulkaneifel GmbH
Leopoldstrasse 9a
54550 Daun/Vulcan Eifel
Phone: +49 (0) 6592 951370
Fax: +49 (0) 6592 951320
E-mail: info@gesundland-vulkaneifel.de
Website: www.gesundland-vulkaneifel.de, www.gesundland-vulkaneifel.com and www.gesundland-vulkaneifel.nl
Queries and requests for information, changes, blocking or deletion can be sent by post to this address or by e-mail to datenschutz@gesundland-vulkaneifel.de.
3 Name and address of the data protection officer
The data protection officer of the controller is:
Günter Hilgers
EcoVisio GmbH
Rheinwerkallee 3
53227 Bonn
E-Mail: datenschutz@gesundland-vulkaneifel.de
Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
4 Contact details of the supervisory authority (Rhineland-Palatinate)
The competent supervisory authority for the controller is:
Name: State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Street: Hintere Bleiche 34
Place: 55116 Mainz
Phone: +49 (0) 6131 / 8920-0
Fax: +49 (0) 6131 / 8920-299
E-mail: poststelle@datenschutz.rlp.de
5 External hosting
This website is hosted by an external service provider (hoster). With the service was
Hetzner Online GmbH
Industrial road 25
91710 Gunzenhausen
commissioned. Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).
Our hoster will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions with respect to such data.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, a contract for commissioned processing in accordance with Art. 28 DSGVO was concluded with the service provider.
6 cookies
A cookie is a small data record that is stored on your terminal device and contains data such as personal page settings and login information. This record is generated and sent to you by the web server to which you have connected via your web browser. In general, we use cookies to analyze interest in our websites and to improve the usability of our websites. In principle, you can also access our web pages without cookies. However, if you want to use our web pages to their full extent or comfortably, you should accept those cookies that enable the use of certain functions or make the use more comfortable. The purposes of the cookies used by us can be found in the consent management when you first access our website or afterwards by accessing the control of the cookie services under "Cookies" on our website.
By using our websites, you will be asked to consent to the use of cookies unless they are necessary for the proper operation of the website. You can decide whether you consent to the use of cookies that require your consent in the Consent Manager on our website.
You also have the option of setting your browser so that cookies are displayed before they are stored, only certain cookies are accepted or rejected, or cookies are generally rejected. We would like to point out that changes to browser settings only ever affect the browser in question. If you use different browsers or change the end device, the settings must be made again. Furthermore, you can delete cookies from your storage medium at any time. For information on cookie settings, how to change them and how to delete cookies, please refer to the help function of your web browser.
The most common types of cookies are explained below for your understanding:
6.1 Session cookies
While you are active on a website, a session cookie is temporarily stored in the memory of your computer, in which a session identifier is saved, e.g. to prevent you from having to log in again each time you change pages. Session cookies are deleted when you log out or lose their validity once their session has automatically expired.
6.2 Permanent or protocol cookies
A persistent or log cookie stores a file on your computer for the period of time specified in the expiration date. These cookies allow websites to remember your information and settings the next time you visit. This results in faster and more convenient access, as you do not have to set your language preferences for our portal again, for example. Once the expiration date has passed, the cookie is automatically deleted when you visit the website that generated it.
6.3 Third-party cookies
Third-party cookies come from providers other than the website operator. For example, they may be used to collect information for advertising, custom content, and web statistics.
6.4 Flash cookies
Flash cookies are stored on your computer as data elements of web pages when they are powered by Adobe Flash. Flash cookies have no time limit.
6.5 Borlabs cookie
6.5.1 Description and purpose of data processing
Our website uses Borlabs Cookie Consent technology to obtain your consent to store certain cookies in your browser or to use certain technologies and to document this consent in a privacy-compliant manner. The provider of this technology is Borlabs - Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, which stores the consents you have given or the revocation of these consents. This data is not shared with the Borlabs cookie provider.
6.5.2 Legal basis of the processing
The use of Borlabs cookie consent technology takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.
6.5.3 Duration of storage, possibility of objection and elimination
The collected data will be stored until you request us to delete it, or until you delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Otherwise, the cookies are automatically deleted after 12 months. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
6.5.4 Job processing
Borlabs cookie consent technology is operated on its own servers. No personal data is transferred.
7 Collection of general data and information
Our website collects a series of general data and information with each call of the website by a data subject or an automated system. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
When using these general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed (1) to deliver the contents of our website correctly, (2) to optimize the contents of our website and the advertising for these, (3) to ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, we statistically evaluate this anonymously collected data and information on one hand, and on the other hand, with the aim of increasing the data protection and data security of our enterprise, so as to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
We also use local storage and session storage technology (also called "local data" and "local storage" and "session storage"). With local storage, data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser window or exit the program, if you do not actively delete the cache. Local Storage allows your preferences when using our websites to be stored on your computer and used by you. The function of Session Storage corresponds in content to the Local Storage described, except that the corresponding data is automatically removed from the cache of your browser immediately after closing the browser ("session").
Third parties cannot access the data stored in the local storage and in the session storage. They are not passed on to third parties and are not used for advertising purposes. In particular, this technology is used to present our content to you in an attractive graphical presentation (e.g. pop-ups, etc.) and to personalize our offer and navigation on our pages for you. You manage local storage content in the browser via the settings for "History" or "Local data", depending on which browser you use. If you restrict the described functions accordingly, this may result in functional restrictions.
Legal basis for the processing of personal data
Art. 6 (1) lit. f DS-GVO (legitimate interest). Our legitimate interest is to maintain the compatibility and stability of this web application for as many users as possible, including abuse prevention and troubleshooting.
Duration of storage
The deletion of the aforementioned technical data takes place as soon as it is no longer needed to ensure the compatibility of this web application for all visitors. We have no influence on the storage period of the data in your local storage. You manage Local Storage content in the browser via the settings for "History" or "Local Data", depending on which browser you use. If you restrict the described functions accordingly, this may result in functional restrictions.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
8 Scope and purpose of use of the collected data
8.1 HealthyCountry Volcanic Eifel - General
Each time a web page or a file accessible via a browser program is requested, the following data is stored:
This information is used to optimize the GesundLand Vulkaneifel GmbH websites and to log any attacks on our services via the Internet.
8.2 HealthyCountry Volcanic Eifel - Contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
The data you enter in the contact form will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed) or you request us to delete the data in accordance with Art. 17 DSGVO. Mandatory legal provisions - in particular retention periods - remain unaffected.
8.3 GesundLand-Vulkaneifel - Inquiry by e-mail, telephone or fax
If you contact us by e-mail, phone or fax, your request including all resulting personal data (name, request) will be stored and processed for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 sentence 1 lit. b DSGVO, provided that your request is related to the performance of a contract or is necessary for the performance of pre-contractual measures (e.g. questions about our products, our company or others).
The data you provide will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed) or you request us to delete the data in accordance with Art. 17 DSGVO. Mandatory legal provisions - in particular retention periods - remain unaffected.
8.4 GesundLand-Vulkaneifel - Bookings
In order to enable your online booking/direct booking of accommodation services and to enable other travel services, we have linked reservation programs on our website.
8.4.1 Deskline
Deskline is the reservation program of the company feratel media technologies AG, Maria-Theresien-Straße 8, A-6020 Innsbruck.
We have connected Deskline via an API. When you make a reservation, you will be linked to Deskline's web pages. The data collected when booking accommodation: First name, last name, e-mail address, phone number, street, house number, zip code, city, as well as your travel data (arrival, departure, number of people, type of accommodation, etc.) are stored and processed in Deskline's reservation system.
The data will only be used to process your reservation and will not be used for any other purpose (e.g. advertising).
For more information about the processing of your data in Deskline, please refer to the Company's Privacy Policy at https://www.feratel.de/datenschutz/ and https://www.feratel.com/datenschutz.html.
8.4.2 Regiondo
If you book a tour via our website, this is done via the service provider Regiondo, whose booking screen is integrated on our website. The provider is Regiondo GmbH, Grafinger Straße 6, 81671 Munich.
By using Regiondo on our website, usage information, including your IP address, is transmitted to and stored on a Regiondo server. This data is only transmitted when Regiondo is used. The transmission to, and processing by Regiondo is governed by Regiondo's privacy policy.
Legal basis of processing
The data processing is based on contractual agreements for booking tours via our website (Art. 6 para. 1 lit. b DSGVO).
Data transmission:
The Contractor shall be entitled to enter into subcontracting relationships for the performance of the tasks assigned to it. The following applies to the transmission and processing of personal data at the Contractor and its subcontractors: the transmission and processing takes place exclusively on servers in the territory of the Federal Republic of Germany, in a member state of the European Union or in another state party to the Agreement on the European Economic Area. As far as data of the provider is transferred and stored in a third country, Regiondo guarantees that data transfers of this kind comply with the applicable data protection laws. For more information on data processing, please refer to the applicable data protection provisions of Regiondo GmbH at https://pro.regiondo.com/de/datenschutz/.
Regiondo also uses subcontractors based in the USA to fulfill orders. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. In such a case, the transfer takes place on the basis of your consent (by using Regiondo services on our site) according to Art. 6 para. 1 lit. a in conjunction with Art. 49 para. 1 lit. a DSGVO, since with the use of Regiondo a data transfer to the USA cannot be excluded.
Job processing
We have entered into an order data processing agreement with Regiondo and fully implement the requirements of the German data protection authorities when using Regiondo.
For more information about Regiondo, please see Regiondo's privacy policy at: https://pro.regiondo.com/de/datenschutz/.
8.4.3 Outdooractive
On the website, website content is reproduced via an interface to the service provider Outdooractive AG, Missener Straße 18, 87509 Immenstadt (hereinafter "Outdooractive"). Outdooractive provides electronic databases that you can use in the form of an electronic information portal in the digital tourism sector. This includes, for example, map and route planning.
Outdooractive processes the following data on its own responsibility to provide you with the databases and to ensure stability and security:
The data is technically necessary to display the electronic databases and to ensure stability and security. The permissibility of this processing is based on Art. 6 (1) f) DSGVO (legitimate interest). The provision of a travel database is in the economic interest of the controller. The provision of the data is voluntary, but is necessary to use the functions offered.
Outdooractive uses cookies for the evaluation, which are stored on your system. Outdooractive stores the information collected in this way on servers in Germany and in third countries. You can set the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to make full use of Outdooractive's electronic databases. Preventing the storage of cookies is possible through the setting in your browser. Outdooractive will continue to use your GPS data if you use the electronic databases.
The operator has no influence on the collected data and data processing operations, nor is the operator aware of the full scope of data collection, the purposes of processing, the storage periods. The operator also has no information about the deletion of the collected data by Outdooractive.
Outdooractive stores the data collected about you as usage profiles and uses them for its own purposes of market research and/or demand-oriented design of the electronic databases. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Outdooractive.
For more information about the purpose and scope of data collection and processing by Outdooractive, please visit: Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt and in the privacy policy:
https://corporate.outdooractive.com/de/datenschutzrichtlinien/
https://www.outdooractive.com/de/datenschutz.html
9 Dispatch newsletter with CleverReach
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Here, among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletter, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Legal basis of processing
The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO).
Revocation
You can revoke your consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If you do not want CleverReach to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe directly on the website.
Duration of storage
The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.
Job processing
We have concluded an order data processing contract with CleverReach and fully implement the requirements of the German data protection authorities when using CleverReach.
For more information about CleverReach, please see CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.
10 Deletion and blocking of personal data
Unless otherwise specified:
The controller shall process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or where provided for by laws or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a storage period prescribed by another competent legislator expires, the personal data will be blocked or deleted in accordance with the statutory provisions.
11 Rights of the data subject
a) Right to information
You can exercise your right to information in accordance with Art. 15 DSGVO at any time as to whether personal data relating to you is being processed by us.
b) Right to rectification
You can exercise your right of rectification in accordance with Art. 16 DSGVO at any time and request the correction of inaccurate personal data concerning you.
c) Right to restriction of processing
You may exercise your right to restrict processing in accordance with Art. 18 DSGVO at any time and request the restriction of processing, provided that the legal requirements for this are met.
d) Right to deletion
You can exercise your right to erasure in accordance with Art. 17 DSGVO at any time and request that personal data relating to you be deleted immediately if this data is no longer required for the purposes for which it was collected or otherwise processed. This right of deletion may be opposed by other legal obligations (e.g. retention obligations).
e) Right to information
You may exercise your right to information pursuant to Art. 19 of the GDPR at any time. If you have asserted a right to erasure, rectification or restriction of processing of personal data relating to you, we are obliged to notify all recipients to whom the personal data relating to you has been disclosed of the rectification or erasure of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
f) Right to data portability
You can exercise your right to data portability in accordance with Art. 20 DSGVO at any time. You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, if this is technically feasible.
g) Right to object to the collection of data in special cases as well as to direct advertising (Art. 21 DSGO).
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims (objection under Article 21(1) DSGVO).
If we process personal data for the purpose of direct marketing, the data subject shall have the right to object at any time to processing of personal data for such marketing; this shall also apply to profiling insofar as it is related to such direct marketing. If the data subject objects to us to the processing for direct marketing purposes, we will no longer process the personal data for these purposes (objection pursuant to Article 21 (2) DSGVO).
h) Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
12 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, their place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Data protection during applications and the application process
We offer you the opportunity to apply to us (e.g. by e-mail, post or via Facebook). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal provisions and that your data will be treated as strictly confidential.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to establish an employment relationship.
The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time.
Your personal data will only be passed on within our company to persons who are involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG-neu and Art. 6 (1) lit. b DSGVO for the purpose of implementing the employment relationship.
Data retention period
If we are unable to make you a job offer, or if you reject a job offer or withdraw your application, we reserve the right to store the data you have provided on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal of the application).
The data is then deleted and the physical application documents destroyed. Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.
A longer storage can also take place if you have given a corresponding consent (Art. 6 para. 1 lit. a DSGVO) or if legal storage obligations oppose the deletion.
13 Data protection provisions on the use and application of fan pages
13.1 Privacy policy for Facebook fan page
13.1.1 Responsible
As the operator of this Facebook page, we (GesundLand Vulkaneifel GmbH, Leopoldstraße 9a, 54550 Daun/Vulkaneifel, Germany) together with the operator of the social network Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) are the responsible party within the meaning of Article 4 No. 7 of the General Data Protection Regulation (DSGVO). When you visit our Facebook page, personal data is processed by the responsible parties. In the following, we will inform you about what data is involved, how it is processed and what rights you have in this regard. As the responsible party for this page, we have entered into agreements with Facebook, which, among other things, regulate the conditions for using the Facebook page. The terms of use of Facebook and the other conditions and guidelines listed there at the end are authoritative.
13.1.2 Purposes of the processing
The processing of the information is intended, among other things, to allow Facebook to improve its system of advertising that it distributes through its network. On the other hand, it is intended to allow us, as operators of the Facebook page, to obtain statistics that Facebook creates based on the visits to our Facebook page. The purpose of this is to control the marketing of our activity. For example, it allows us to gain knowledge of the profiles of visitors who appreciate our Facebook page or use applications of the page, in order to provide them with more relevant content and develop features that may be of greater interest to them.
In addition, to help us better understand how we can use our Facebook page to achieve our goals, demographic and geographic analyses are also created based on the information collected and made available to us. We can use this information to target interest-based ads without directly knowing the identity of the visitor. If visitors use Facebook on multiple devices, the collection and analysis can also take place across devices if they are registered visitors who are logged into their own profiles. The visitor statistics created are transmitted to us exclusively in anonymized form. We have no access to the underlying data.
13.1.3 Legal basis and legitimate interests
We operate this Facebook page in order to present ourselves to Facebook users and other interested persons who visit our Facebook page and to communicate with them. The processing of the users' personal data is based on our legitimate interests in an optimized company presentation (Art. 6 para. 1 lit. f DSGVO).
13.1.4 Passing on data
We have no influence on the collection of data by Facebook, nor on the data processing procedures existing at Facebook. We are also not aware of the scope of data collection, the purposes of processing or the storage periods. A forwarding of the data in anonymized statistics can therefore not be ruled out.
When you visit our Facebook page, it is conceivable that some of the information collected will also be processed outside the European Union by Facebook Inc. with headquarters in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. You decide yourself in the consent management of the Facebook page whether you want to agree to such a transfer or not. In such a case, the transfer takes place on the basis of your consent pursuant to Art. 6 (1) a DSGVO.
We do not pass on any personal data ourselves.
13.1.5 Opposition options
Facebook users can influence the extent to which their user behavior may be recorded when visiting our Facebook page under the settings for advertising preferences. Further options are offered by the Facebook settings, the consent management of the fan page or the form for the right to object. Processing of information by means of the cookie used by Facebook can also be prevented by not allowing cookies from third-party providers or those from Facebook in your own browser settings.
13.1.6 Nature of shared responsibility
It essentially follows from the agreements with Facebook, also on shared responsibility, that requests for information and the assertion of other data subject rights are sensibly asserted directly with Facebook. This is because, as the provider of the social network and the possibility of including Facebook pages there, Facebook alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. However, if our support is required, we can be contacted at any time.
13.1.7 Information on contact options and further rights as a data subject
Further information on our contact details, the rights of data subjects vis-à-vis us and how personal data is processed by us in other respects can be found in this privacy policy. Information on the handling of personal data by Facebook can be found in their privacy policy.
13.2 Privacy policy for Instagram
13.2.1 Responsible
As the operator of this Instagram page, we (GesundLand Vulkaneifel GmbH, Leopoldstraße 9a, 54550 Daun/Vulkaneifel, Germany) together with the operator of the social network Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) are the responsible party within the meaning of Article 4 No. 7 of the General Data Protection Regulation (DSGVO). When you visit our Instagram page, personal data is processed by the responsible parties. In the following, we will inform you about what data is involved, how it is processed and what rights you have in this regard.
As the person responsible for this page, we have entered into agreements with Facebook which, among other things, regulate the conditions for use of the Instagram page. The terms of use of Instagram are authoritative
at https://help.instagram.com/581066165581870 and the other conditions and guidelines listed there at the end.
13.2.2 Purposes of the processing
The processing of the information is intended, among other things, to allow Facebook to improve its system of advertising that it distributes through its network. On the other hand, it is intended to allow us, as operators of the Instagram page, to obtain statistics that Facebook creates based on the visits to our Instagram page. The purpose of this is to control the marketing of our activity. For example, it allows us to gain knowledge of the profiles of visitors who appreciate our Instagram page or use applications of the page, in order to provide them with more relevant content and develop features that may be of greater interest to them.
In addition, to help us better understand how we can use our Instagram page to achieve our goals, demographic and geographic analyses are also created based on the information collected and made available to us. We can use this information to target interest-based ads without directly knowing the identity of the visitor. If visitors use Facebook on multiple devices, the collection and analysis can also take place across devices if they are registered visitors who are logged into their own profiles.
The visitor statistics created are transmitted to us exclusively in anonymized form. We have no access to the underlying data in each case.
13.2.3 Legal basis and legitimate interests
We operate this Instagram page in order to present ourselves to and communicate with Instagram users and other interested persons who visit our Instagram page. The processing of the users' personal data is based on our legitimate interests in an optimized company presentation (Art. 6 para. 1 lit. f DSGVO).
13.2.4 Passing on data
We have no influence on the collection of data by Instagram, nor on the data processing procedures existing at Facebook. We are also not aware of the scope of the data collection, the purposes of the processing or the stored storage periods. A forwarding of the data in anonymized statistics can therefore not be excluded.
When you visit our Instagram page, it is conceivable that some of the information collected will also be processed outside the European Union by Facebook Inc. with headquarters in the USA. We would like to point out that the USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly also without any legal remedy on your part. You decide in the consent management of the Instagram page itself whether you want to consent to such a transfer or not. In such a case, the transfer will take place on the basis of your consent pursuant to Art. 49 (1) a DSGVO.
We do not pass on any personal data ourselves.
13.2.5 Opposition options
Instagram users can influence the extent to which their user behavior may be recorded when visiting our Instagram page under the settings for advertising preferences. Further options are offered by the Facebook and Instagram settings under:
https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fads%2Fpreferences%2F%3Fentry_product%3Dad_settings_screen
https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/, the Consent Management of the Fanpage or the form for the right to object at:
https://www.facebook.com/help/contact/1994830130782319 .
The processing of information by means of the cookie used by Facebook can also be prevented by not allowing cookies from third-party providers or those from Facebook in your own browser settings.
13.2.6 Nature of shared responsibility
The agreements with Facebook on joint responsibility essentially mean that requests for information and the assertion of other data subjects' rights can be asserted directly with Facebook. This is because as the provider of the social network and the possibility of including Facebook pages there, Facebook alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. However, if our support is required, we can be contacted at any time.
13.2.7 Information on contact options and further rights as a data subject
Further information on our contact details, the rights of data subjects vis-à-vis us and how personal data is otherwise processed by us can be found in this privacy policy.
Information on how Facebook handles personal data on Instagram can be found in their privacy policy at https://help.instagram.com/519522125107875.
13.3 Privacy policy for YouTube
13.3.1 Responsible
As the operator of this YouTube page, we (GesundLand Vulkaneifel GmbH, Leopoldstraße 9a, 54550 Daun/Vulkaneifel, Germany) together with the operator of the YouTube website (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA a subsidiary of Google inc. 160 Amphitheatre parkway, Mountain View, CA 94043, USA) are the controller within the meaning of Article 4 No. 7 of the General Data Protection Regulation (DSGVO). When you visit our YouTube page, personal data is processed by the responsible parties. In the following, we will inform you about what data is involved, how it is processed and what rights you have in this regard.
All privacy settings for YouTube must be made in the Google account. As the responsible party for this site, we have entered into agreements with Google that govern, among other things, the conditions for using Google services (here: YouTube). The terms of use of YouTube at: https://www.youtube.com/static?gl=DE&template=terms&hl=de and of Google at: https://policies.google.com/terms?hl=de are authoritative.
13.3.2 Purposes of the processing
The processing of the information is intended, among other things, to allow YouTube to improve its system of advertising that it distributes through its network. On the other hand, it is intended to enable us, as operators of the YouTube site, to obtain statistics that YouTube compiles based on visits to our YouTube site. The purpose of this is to control the marketing of our activity. For example, it allows us to gain knowledge of the profiles of visitors who appreciate our YouTube page or use applications of the page, in order to provide them with more relevant content and develop features that may be of greater interest to you.
In addition, to help us better understand how we can use our YouTube site to achieve our goals, demographic and geographic analyses are also created from the information collected and made available to us. We may use this information to target interest-based ads without directly knowing the identity of the visitor. If visitors use YouTube on multiple devices, the collection and analysis can also take place across devices if they are registered visitors who are logged into their own profiles. The visitor statistics created are transmitted to us exclusively in anonymized form. We have no access to the underlying data.
13.3.3 Legal basis and legitimate interests
We operate this YouTube page in order to present ourselves to YouTube users and other interested persons who visit our YouTube page and to communicate with them. The processing of the users' personal data is based on our legitimate interests in an optimized company presentation (Art. 6 para. 1 lit. f DSGVO).
13.3.4 Passing on data
We have neither influence on the collection of data by Google, nor on the data processing procedures existing at Google. We are also not aware of the scope of data collection, the purposes of processing or the storage periods. A forwarding of the data in anonymized statistics can therefore not be excluded.
When you visit our YouTube page, it is conceivable that some of the information collected will also be processed outside the European Union by YouTube LLC. or Google Inc. based in the USA. We would like to point out that the USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without any legal remedy. You decide in the consent management of the YouTube site itself whether you want to consent to such a transfer or not. In such a case, the transfer takes place on the basis of your consent pursuant to Art. 6 Para. 1 lit. a DSGVO.
We do not pass on any personal data ourselves.
13.3.5 Opposition options
YouTube users can influence the extent to which their user behavior may be recorded when visiting our YouTube page under the settings of their Google account. See also: https://policies.google.com/privacy?hl=de#infochoices. Further options are offered by the consent management of the fan page.
The processing of information by means of the cookie used by YouTube or Google can also be prevented by not allowing cookies from third-party providers or those from YouTube or Google in your own browser settings.
13.3.6 Nature of shared responsibility
From the agreements with YouTube and Google also on joint responsibility, it essentially follows that requests for information and the assertion of other data subject rights are sensibly asserted directly with YouTube or Google. This is because, as providers of the social network and the possibility of embedding YouTube pages there, YouTube or Google alone have direct access to the necessary information and can also take any necessary measures and provide information immediately. Should our support nevertheless be required, we can be contacted at any time.
13.3.7 Information on contact options and further rights as a data subject
Further information on our contact details, the rights of data subjects vis-à-vis us and how personal data is processed by us in other respects can be found in this privacy policy.
Information on the handling of personal data by YouTube on Google can be found in their privacy policy(https://policies.google.com/privacy?hl=de).
13.4 Privacy policy for Pinterest
13.4.1 Responsible persons
As the operator of this Pinterest site, we (GesundLand Vulkaneifel GmbH, Leopoldstraße 9a, 54550 Daun/Vulkaneifel, Germany) together with the operator of the social network Pinterest (Pinterest Europe Ltd., 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland a subsidiary of Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA)). Responsible party within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (DSGVO). When visiting our Pinterest page, personal data is processed by the responsible parties. In the following, we will inform you about what data is involved, how it is processed and what rights you have in this regard. As the responsible party for this site, we have entered into agreements with Pinterest, which, among other things, regulate the conditions for using the Pinterest site. The terms of use of Pinterest at https://policy.pinterest.com/de/terms-of-service and the so-called community guidelines at https://policy.pinterest.com/de/community-guidelines are authoritative.
13.4.2 Purposes of the processing
The processing of the information is intended, among other things, to enable Pinterest to improve its system of advertising that it distributes through its network. On the other hand, it is intended to enable us, as the operator of the Pinterest site, to obtain statistics that Pinterest creates based on the visits to our Pinterest site. The purpose of this is to control the marketing of our activity. For example, it allows us to gain knowledge of the profiles of visitors who like our Pinterest page or use applications of the site in order to provide them with more relevant content and develop features that may be of greater interest to them.
In addition, to help us better understand how we can use our Pinterest site to achieve our goals, demographic and geographic analyses are also created based on the information collected and made available to us. We may use this information to target interest-based ads without directly knowing the identity of the visitor. If visitors use Pinterest on multiple devices, the collection and analysis can also take place across devices if they are registered visitors who are logged into their own profiles. The visitor statistics created are transmitted to us exclusively in anonymized form. We have no access to the underlying data.
13.4.3 Legal basis and legitimate interests
We operate this Pinterest page in order to present ourselves to Pinterest users and other interested persons who visit our Pinterest page and to communicate with them. The processing of the users' personal data is based on our legitimate interests in an optimized company presentation (Art. 6 para. 1 lit. f DSGVO).
13.4.4 Passing on data
We have no influence on the collection of data by Pinterest, nor on the data processing procedures existing at Pinterest. We are also not aware of the scope of data collection, the purposes of processing or the storage periods. A forwarding of the data can therefore not be excluded.
When you visit our Pinterest site, it is conceivable that some of the information collected may also be processed outside the European Union by Pinterest Inc. based in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly also without any legal remedy on your part. They decide in the consent management of the Facebook page itself whether you want to agree to such a transfer or not. In such a case, the transfer takes place on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO.
We do not pass on any personal data ourselves.
13.4.5 Opposition options
Pinerest users can influence the extent to which their search results may be collected when visiting our Pinterest page at https://help.pinterest.com/de/article/your-privacy-and-data-settings. Further options are offered by the consent management of the fan page.
Processing of information by means of the cookies used by Pinterest can also be prevented by not allowing cookies from third-party providers or those from Pinterest in your own browser settings.
13.4.6 Nature of shared responsibility
From the agreements with Pinterest, also on joint responsibility, it essentially follows that requests for information and the assertion of further data subject rights are sensibly asserted directly with Pinterest. As the provider of the social network and the possibility to integrate Pinterest pages there, Pinterest alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. However, should our support be required, we can be contacted at any time. We have entered into a shared responsibility agreement with Pinterest. The joint responsibility for the processing of your data is regulated in the Pinterest Data Sharing Addendum. You can find the regulations on this as an addendum (EXHIBIT A) to the Pinterest Advertising Services Agreement at https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/.
13.4.7 Information on contact options and further rights as a data subject
Further information on our contact details, the rights of data subjects vis-à-vis us and how personal data is processed by us in other respects can be found in this privacy policy. Information on the handling of personal data by Pinterest can be found in their privacy policy at https://policy.pinterest.com/de/privacy-policy.
14 Analysis tools
14.1 Privacy policy on the use and application of Google Analytics (with anonymization function)
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.
Legal basis of processing:
The storage of "Google Analytics cookies" and the use of this tool are based on your consent in the context of consent management. The processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke or change your consent at any time in the consent management.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Google also processes your personal data in the USA. We would like to point out that the USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without any legal remedy on your part. With your consent to the use of Google Analytics in Consent Management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of Google cookies in accordance with Article 6 (1) (a) in conjunction with Article 49 (1) (a) of the German Data Protection Act (DSGVO), since data transfer to the USA cannot be ruled out with consent to the use of Google cookies.
We do not pass on any personal data ourselves.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics on the one hand in the consent management of the homepage or by clicking on the following link. In the latter case, an opt-out cookie will be set that prevents the collection of your data during future visits to this website: https://tools.google.com/dlpage/gaoptout?h
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Job processing
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
The Conference of the Independent Data Protection Authorities of the Federal Republic and the Länder (DSK) stated in its decision of 12 May 2020 that the data processed with Google Analytics is personal data within the meaning of the GDPR.
In the opinion of the data protection supervisory authorities, the processing of personal data in connection with Google Analytics is not commissioned processing pursuant to Art. 28 DSGVO. According to Art. 4 No. 7, Art. 28 (10) DSGVO, the controller must determine the purposes and means of processing itself. From this follows the obligation of the processor to process the data exclusively on the instructions of the controller (Art. 29 DSGVO). When using Google Analytics, however, we as website operators do not determine the purposes and means of data processing alone. Rather, these are in part specified exclusively by Google, so that Google itself is responsible in this respect. The supervisory authorities clarify in this respect: "Although Google continues to offer a contract for commissioned processing, it also clarifies in the 'Google Measurement Controller- Data Protection Terms' that Google and the user (website operator) are separately responsible for certain processing processes. Furthermore, Google clarifies in the terms of use that Google processes the data for its own purposes, in particular also for the purpose of providing its web analysis and tracking service. According to Article 28 (10) of the GDPR, Google is thus no longer a processor. Taking into account the current case law of the ECJ, Google and the Google Analytics user are jointly responsible for the data processing, so that the requirements of Article 26 GDPR must be observed."
We have entered into a shared responsibility agreement with Google.
At this point, we would also like to point out that the Commission's opinion is subject to a future - possibly divergent - interpretation by the European Data Protection Board and the case law of the European Court of Justice.
Demographic characteristics in Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
The essence of joint responsibility
The agreements with Google on joint responsibility essentially mean that requests for information and the assertion of other data subjects' rights are sensibly asserted directly against Google. This is because as the provider of the social network and the possibility of including Google pages there, Google alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. However, if our support is required, we can be contacted at any time.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is deleted after 26 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de
14 2. Google Ads (formerly Google Adwords)
14.2.1 Google Ads Conversion
This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Within the scope of Google AdWords, we use the so-called conversion tracking. We use the offer of Google Ads Conversion to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. When you click on an ad placed by Google, a cookie is set for conversion tracking. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. We learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive information that personally identifies users.
We ourselves do not collect or process any personal data in the aforementioned advertising measures.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
Legal basis of processing:
The storage of "Google cookies" and the use of this tool are based on your consent in the context of consent management. The processing is based exclusively on Art. 6 para. 1 lit. a DSGVO.
Disclosure
Google also processes your personal data in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedy on your part. In such a case, the transfer takes place on the basis of your consent to the use of Google cookies in accordance with Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) DSGVO, since with the consent to the use of Google cookies, a data transfer to the USA cannot be excluded.
Objection to data collection
If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.
For more information on the handling of user data in connection with Google AdWords and Google Conversion Tracking, please refer to Google's privacy policy: https: //www.google.de/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Storage duration
These cookies lose their validity after 30 days and are not used to personally identify users.
14.2.2 Google Ads Remarketing
We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google display network.
The visits of these users are recorded via these cookies. The cookies are used to uniquely identify a web browser on a particular end device and not to identify a person.
Legal basis of processing:
The storage of "Google remarketing cookies" and the use of this tool are based on your consent in the context of consent management. The processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke or change your consent at any time in the consent management.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Google also processes your personal data in the USA. We would like to point out that the USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without any legal remedy on your part. With your consent to the use of Google Ads Remarketing in Consent Management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of Google cookies in accordance with Art. 6 (1) a in conjunction with Art. 49 (1) a DSGVO, as data transfer to the USA cannot be ruled out with the consent to the use of Google cookies.
We do not pass on any personal data ourselves.
Objection to data collection
You can prevent participation in this tracking process in several ways:
a) by an appropriate setting of your browser software, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers;
b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin;
c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies;
d) by permanently deactivating it in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin,
e) by means of the corresponding cookie setting in the consent management.
We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
Storage duration
Up to 180 days (for cookies used through this website).
15 Integration of video platforms (here: YouTube) on the website
We have included YouTube videos on our website. This way we can present you interesting videos directly on our site. YouTube is a subsidiary of Google LLC. The video portal "YouTube" is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
These videos are all embedded in "enhanced privacy mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in the next paragraph will be transferred. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Legal basis of processing
The storage of "YouTube cookies" and the use of this tool are based on your consent in the context of consent management. The processing is based exclusively on Art. 6 para. 1 lit. a DSGVO. You can revoke or change your consent at any time in the consent management.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Data sharing
Google/YouTube also processes your personal data in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. With your consent to the use of YouTube in consent management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of YouTube cookies in accordance with Article 6 (1) (a) in conjunction with Article 49 (1) (a) DSGVO, as data transfer to the USA cannot be ruled out with the consent to the use of YouTube cookies.
We do not pass on any personal data ourselves.
Opposition options
YouTube users can influence the extent to which their user behavior may be recorded when visiting our YouTube page under the settings for advertising preferences.
The processing of information by means of the cookie used by YouTube can also be prevented by not allowing cookies from third-party providers or those from YouTube and/or Google in your own browser settings.
Please note that in this case you may not be able to use all the functions of our website.
For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
16 Use of script libraries (here: Google Fonts)
In order to display our content correctly and in a graphically appealing manner across browsers, we use "Google Fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google") on our website to display fonts.
We have integrated this script library locally on our web server, so that no connection to Google is established when our website is called up and no "Google cookie" is set.
Legal basis of processing
The legal basis for the integration of Google Fonts is our legitimate interest in a correct and graphically appealing presentation of the website according to Art. 6 para. 1 sentence 1 lit. f DSGVO. Since we have integrated the script library locally on our own web server, there is no data transfer to Google. In this respect, no explicit consent is required from you for the use of Google Fonts.
Data sharing
Due to the local integration of the script library on our web server, no data is passed on to third parties.
Storage duration
We do not collect any personal data by embedding the script library locally on our server.
17 Content Delivery Network (CDN)
17.1 Google CDN (Content Delivery Network)
We use the content delivery network Google Cloud CDN. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google offers a globally distributed content delivery network. This technically routes the transfer of information between your browser and our website via Google's network. This allows us to increase the worldwide accessibility and performance of our website.
For example, the following data is processed:
Content data (e.g. test inputs, photographs, videos)
Usage data (e.g. web pages visited, interest in content, access times)
Meta/communication data (device information, IP addresses)
Purpose of data processing
The data is processed exclusively to maintain the security and functionality of the CDN.
Legal basis for data processing
The use of Google Cloud CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f DSGVO).
Duration of data storage
The specific storage period of the processed data cannot be influenced by us, but is determined by Google. You can find more information about Google Cloud CDN here: https://cloud.google.com/cdn/docs/overview?hl=de.
Data transmission
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause.
We would like to point out that the USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. With your consent to the use of YouTube in Consent Management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of the CDN cookies in accordance with Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) DSGVO, as data transfer to the USA cannot be ruled out with the consent to the use of the CDN cookies.
We do not pass on any personal data ourselves.
17.2 Bootstrap/jsdelivr CDN
We use on our site the CSS framework Bootstrap whose official CDN jsDelivr of the company Prospect One Sp., Krolweska 65A, 30-081 Krakow, Poland (website: https://prospectone.io/).
The framework includes HTML and CSS-based design templates for typography, forms, buttons, tables, grid systems, navigation and other interface design elements, as well as additional optional JavaScript extensions.
To make optimal use of this library, we use a so-called CDN (Content Delivery Network) from jsdelivr. This results in considerable performance advantages, and bugs within the library are also comprehensively fixed without us having to intervene additionally.
Data transmission
The transmission and processing of personal data takes place exclusively on servers in the European Union.
Storage of data and legal basis of processing:
The storage of the Bootstrap cookie and the use of this tool are based on Art. 6 para. 1 lit. f DSGVO (legitimate interest).
Our legitimate interest is to maintain the compatibility and stability of this website for as many users as possible, including abuse prevention and troubleshooting.
With regard to the processing, you have the right to object listed in Art. 21. You can find more information in this privacy policy.
You can find more information about the handling of the transferred data in the privacy policy of the provider at https://www.jsdelivr.com/privacy-policy-jsdelivr-com.
18 Other tools
18.1 Google Maps
We use Google Maps on this website to visually display geographical information and to provide directions. Google Maps is a mapping service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland ("Google").
By using Google Maps, information about your use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google LLC, headquartered at 1600 Amphitheatre Parkway, Mountain View, California, USA.
When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. Google Maps is integrated via the resources of Feratel. Google Maps will only be activated when you make use of Deskline's services.
The use of Google Maps is insofar based on your express consent according to Art. 6 para. 1 lit. a DSGVO, in that you expressly agree to the use.
We have no influence on the scope of the data collected by Google. According to our knowledge, this is at least the following data:
Date and time of the visit to the website in question,
Internet address or URL of the accessed web page,
IP address, (start) address entered as part of route planning.
We also have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this.
We would like to point out that Google also processes your personal data in the USA. The USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without any legal remedy on your part.
With your consent to the use of Deskline (by deciding to switch to the pages of Deskline), you also consent to a transfer of your data to the USA. In such a case, the transfer will take place on the basis of your consent to the use of Deskline pursuant to Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) DSGVO, since with the consent to the use of Deskline, the use of Google Maps is also consented to and thus a data transfer to the USA cannot be excluded.
We do not pass on any personal data ourselves.
For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to Google's privacy policy(https://policies.google.com/privacy?hl=de).
18.2 Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website. The provider is Google Ireland Limited, Grodon House, Barrow Street, Dublin 4, Ireland and Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of reCAPTCHA is to check whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website.
For analysis, reCAPTCHA evaluates various information, e.g.
The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
Storage of data and legal basis of processing:
The legal basis for the data processing is your explicit consent to the storage of the Google cookie for reCAPTCHA by Google.
The storage of the cookie and the use of this tool are based on Art. 6 para. 1 lit. f DS-GVO (legitimate interest). Our legitimate interest is to protect the website from automated spying, abuse and SPAM. Nevertheless, we do not use Google reCAPTCHA without your explicit consent.
Data transmission
Google also processes your personal data in the USA. We would like to point out that the USA is assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly also without any legal remedy on your part. With your consent to the use of Google Analytics in Consent Management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of Google cookies in accordance with Article 6 (1) (a) in conjunction with Article 49 (1) (a) of the German Data Protection Act (DSGVO), as data transfer to the USA cannot be ruled out with the consent to the use of Google cookies.
We do not pass on any personal data ourselves.
Job processing
We have concluded an order processing contract with Google.
Storage duration
30 days (cookies)
9 or 18 months (log data)
For more information about Google reCAPTCHA and Google's privacy policy, please see the following links:
www.google.com/intl/de/policies/privacy/ and www.google.com/recaptcha/intro/android.html.
18.3 DoubleClick
We use "DoubleClick" as an online marketing tool on our website. The provider is Google Ireland Limited, Grodon House, Barrow Street, Dublin 4, Ireland and Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
DoubleClick uses cookies on your end devices to present you with relevant ads. This can prevent ads from being displayed more than once. By means of the cookies, a pseudonymous identification number (ID) is assigned to the browser you are using in order to check which ads were displayed in your browser and which ads were called up by you.
The use of DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there. The data collected during the analysis is forwarded to Google. Google assures that this data will not be combined with other data collected by Google.
We use DoubleClick for marketing and optimization purposes.
Storage of data and legal basis of processing:
The storage of cookies and the use of this tool are based on Art. 6 para. 1 lit. a DS-GVO (consent), which must be given by you in the context of the consent management on our homepage. We do not use DoubleClick without your express consent in the consent management of the website.
Data transmission
Google also processes your personal data in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. With your consent to the use of DoubleClick cookies in consent management, you also consent to such a transfer to the USA. In such a case, the transfer takes place on the basis of your consent to the use of Google cookies in accordance with Article 6 (1) (a) in conjunction with Article 49 (1) (a) of the German Data Protection Act (DSGVO), as data transfer to the USA cannot be ruled out with the consent to the use of Google cookies.
We do not pass on any personal data ourselves.
Job processing
We have concluded a contract with Google for the lawfulness of processing in the USA based on the standard contractual clauses.
You can find more information about Google DoubleClick in Google's privacy policy. You can find it under the following link: www.google.com/intl/de/policies/privacy/
18.4 Google Tag Manager
We use Google Tag Manager (hereinafter referred to as "GTM") on this website in order to be able to embed various codes and services on our website in an orderly and simplified manner. GTM is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland ("Google").
The tool itself (which implements the tags) is a cookie-less domain and does not store any personal data. The tool takes care of triggering other tags, which in turn may collect data. When a tag is triggered, GTM does not access this data.
Processing purposes
The purpose of using GTM is the simplified, clear integration of various services and the optimization of their loading times. GTM enables us to reduce the maintenance and loading effort of the website and thus relieves our server.
Personal data processed
Through the GTM, the following personal data may be processed:
IP address to identify the end device (this is anonymized by us)
If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Job processing
We have concluded a contract with Google for commissioned data processing in accordance with Art. 28 DSGVO. This contract for commissioned processing includes the standard contractual clauses in accordance with Art. 46 DSGVO with supplementary undertakings from Google to ensure appropriate guarantees in the context of a possible transfer and processing of personal data in the USA. For more information on the standard contractual clauses, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
Google processes data on our behalf in order to trigger the stored tags and display the services on our website. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Legal basis of processing
We process your personal data within the scope of Art. 6 para. 1 lit. f DSGVO (Legitimate Interest) as mentioned above under anonymization of the IP address. We have a legitimate interest in reducing the maintenance and loading effort of our website and to be able to offer you a fast structure and an optimized presentation.
Data sharing
We cannot rule out the possibility that Google may also process personal data (see above) in the USA. We would like to point out that the USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy on your part. By using our website, you consent to the use of GTM and also to such transfer to the USA.
We do not pass on any personal data ourselves.
19 Legal basis of processing1
Unless otherwise specified:
Article 6 (1) sentence 1 lit. a DSGVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for a delivery of goods or the provision of another service or consideration, the processing is based on Article 6 (1) sentence 1 lit. b DSGVO. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) sentence 1 lit. c DSGVO. In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and as a result his or her name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) sentence 1 lit. d DSGVO.
Ultimately, processing operations could be based on Art. 6(1) sentence 1 lit. f DSGVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 DSGVO).
20 Legitimate interests in processing pursued by the controller or a third party1
If the processing of personal data is based on Article 6 (1) sentence 1 lit. f DSGVO, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.
21 Duration for which the personal data are stored1
The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of the contract.
22 Legal or contractual requirements to provide the personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision1
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information on the contractual partner).
Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.
Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or by contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
23 Changes to this Privacy Policy
GesundLand Vulkaneifel GmbH reserves the right to change this privacy policy. The current version of the privacy policy is always available at www.gesundland-vulkaneifel.de/datenschutz.
This privacy statement was created in the marked points by the privacy statement generator, which is operated and provided in cooperation between DGD Deutsche Gesellschaft für Datenschutz GmbH, Dachau (available at: https://dsgvo-muster-datenschutzerklaerung.dg-datenschutz.de) and the law firm Wilde/Beuger/Solmecke Rechtsanwälte GbR, Cologne (available at: https://www.wbs-law.de/it-recht/datenschutzrecht/datenschutzerklaerung-generator/). These texts are subject to the copyright of DGD Deutsche Gesellschaft für Datenschutz GmbH, Dachau and the law firm Wilde/Beuger/Solmecke Rechtsanwälte GbR, Cologne.
Information on the collection of personal data according to Art. 13 DSGVO for guests
