Data protection

With this privacy policy, we fulfil our information obligations in accordance with Art. 13 & Art. 14 of the General Data Protection Regulation (GDPR). This privacy policy applies to

• www.ferienimdenkmal.de
• @ferienimdenkmal (Instagram)

It is important to us to provide transparent information about the type, scope, purpose and duration of the processing of personal data and the measures we take to protect personal data.

This data protection information has been valid since June 2024 If updates to this document become necessary due to the further development of the website or due to changed requirements, we will document this here.

• Version 1.0
• Status: June 2024

The foundations of a trusting partnership are transparency and reliability: we therefore ensure that personal data is processed in accordance with the applicable regulations on the protection of personal data.

We process personal data with active consent, for the purpose of contract fulfilment or to protect our legitimate interests. The term processing includes the collection, transmission, storage, but also processing on behalf of and deletion of personal data.

How and why we process personal data on this website is explained in detail below.

Table of contents

I.     Responsible for data processing
II General information on data processing
III Data collection on this website
IV. Profiles in social networks
V. Your rights as a data subject

 

I. Responsible for data processing in accordance with Art. 4 No. 7 GDPR:

 

K. Landau/ A. Weyhe Ferien im Denkmal GbR
Hohe Strasse 27
06484 Quedlinburg

e-mail: info@ferienimdenkmal.de

No data protection officer has been appointed for this website; the contact person is the person responsible.

II. GENERAL INFORMATION ON DATA PROCESSING

We only process personal data on this website insofar as this is necessary to provide a functional website and our content and services.

The processing of personal data on this website takes place regularly only with active consent. On this website, the configuration of the consent management tool (colloquially known as the cookie banner) ensures that you actively consent to the processing of your personal data. An exception applies in cases where prior consent cannot be obtained for technical reasons and the processing of the data is permitted by law.

3. legal basis for the processing of personal data

If we obtain the consent of the data subject, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to safeguard our legitimate interests as an entrepreneur or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

4. data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in regulations, laws or other provisions. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires. Unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

III Data collection on this website

 

1. Provision of the website and creation of log files

Each time you visit this website, the system automatically collects data and information from your device's operating system.

The following data is collected:

• your IP address
• Date and time of access
• Specifies the time difference between the requesting host and the web server,
• Type of request
• Client information (type of client, client version)
• Your operating system (device, OS version of the device)
• Website from which you came to my website
• Content of the request or details of the retrieved file that was sent to you
• Access status (successful transmission, error, etc.),
• the amount of data transferred in bytes,

This website is hosted via the infrastructure of Alfahosting GmbH, i.e. it is stored and made available for retrieval. The web server used stores the aforementioned server log files. An AV contract has been concluded with the provider.

• Purpose of processing: Hosting of the website
• Legal basis and legitimate interest: The processing is based on my overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of my website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services
• Data recipient: Alfahosting GmbH, Edmund-von-Lippmann-Straße 13-15, 06112 Halle (Saale), Germany
• Privacy policy: https://alfahosting.de/datenschutz/

2. cookie consent with real cookie banner

This website uses the cookie consent technology of Real Cookie Banner. The tool enables active consent to be obtained for the storage of cookies. When you enter this website, a cookie is stored in your browser in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Real Cookie Banner.

Provider: devowl.io GmbH, Tannet 12, 94539 Grafling, Germany
https://devowl.io/de/wissensdatenbank/real-cookie-banner-datenverarbeitung/

3. e-mail contact & contact form

IV. Profiles in social networks

We use social networks to actively engage with customers, interested parties and users and to provide information about our services and products. When interacting with customers via the platforms, personal data is processed both by us and by the respective platform operator. These processing activities are carried out under joint responsibility with the respective platform operators in accordance with Art. 26 GDPR.

The general information on data processing in this document applies to the processing activities that we carry out.

We are not responsible for the processing activities of the respective platforms; the information provided by the platform operators applies.

The active use of social networks such as Facebook, Instagram or Twitter is exclusively your personal responsibility. This applies in particular to the functions commenting, sharing, rating, etc.

Below you will find a list of all the social media platforms on which I have a profile.

1. Instagram

We run the Instagram profile @ferienimdenkmal

The Instagram service is a product provided by Meta Platforms Ireland Limited. The use of Instagram is free of charge. As a Meta product, Instagram, like Facebook, is financed by personalised advertisements that are determined by evaluating your personal data.

• Joint Controller: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
• Umbrella organisation: Meta Platforms Inc., Menlo Park California, USA
• Privacy policy: https://www.facebook.com/help/568137493302217

V. Your rights as a data subject

If your personal data is processed, you are a so-called data subject (see Art. 4 para. 1 GDPR), so you have the following rights:

Right to information

You can ask us in writing whether we process personal data concerning you. We will provide the following information within four weeks:

(1) the purposes of the processing;
(2) the categories of personal data;
(3) the recipients or categories of recipients;
(4) the planned duration of storage or criteria for determining the duration of storage;
(5) the existence of a right to rectification or erasure of personal data, a right to restriction of processing or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority,
(7) all available information on the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether your personal data is being transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

You can exercise this right by sending us an e-mail with the subject: Request for information.

Right to rectification

If you realise that your personal data is incorrect and/or incomplete, you have the right to have it corrected and/or completed. Please send us an e-mail with the subject: Request for correction. We will process the request as quickly as possible and confirm the correction.

Right to restriction of processing

You can request the restriction of the processing of your personal data under the following conditions:

(1) if you dispute the correctness,

(2) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) if we no longer need the personal data for the purposes of the processing, or

(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether our legitimate reasons for processing outweigh your reasons.

If you wish to restrict processing, please send us an e-mail with the subject: Restriction of processing.

If the processing of your personal data has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

Right to cancellation

1. a) Cancellation obligation

You have the right to demand the immediate deletion of your personal data. We are obliged to delete this data immediately if one of the following reasons applies:

(1) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) you revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing. Or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) your personal data has been processed unlawfully.
(5) The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
(6) your personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

1. b) Information to third parties

If we, as the controller, have made your personal data public and we are obliged to erase it pursuant to Art. 17 (1) GDPR, we will take reasonable steps to inform the controller that you have requested the erasure of all links to your personal data or of copies or replications of your personal data.

1. c) Exceptions

The right to erasure does not exist if the processing is necessary,

(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation that requires processing;
(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(5) for the assertion, exercise or defence of legal claims.

You can exercise this right by contacting us by e-mail with the subject: Delete my personal data.

Right to information

If you have exercised your right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom we have disclosed your personal data of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about the recipients.

Right to data portability

You have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another controller without hindrance from us. Write us an email with your request for data transfer and we will check whether this is technically possible.

Right of objection

You have the right to object at any time to the processing of your personal data, which is based on our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR); this also applies to profiling based on these provisions.

We will then no longer process your personal data unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms. Or the processing serves the assertion, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object to this specific processing at any time. This also applies in particular to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of personal data taking place here violates the GDPR.

The supervisory authority to which the complaint has been submitted will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy.

The responsible supervisory authority is the State Commissioner for Data Protection Saxony-Anhalt.