Privacy policy

As the data controller we hereby inform you with this privacy policy in the sense of Regulation (EU) 2016/679 (GDPR 25/05/2018 / GDPR) about the type, scope and purpose of the processing of personal data within our online offer and the services associated with it. The responsible authority in the sense of data protection law is:

Gut Edermann e. K.

Holzhausen 2, 83317 Teisendorf, Germany

Telephone +49 (0) 8666 92 73 0

Fax +49 (0) 8666 92 73 199

E-mail info@gut-edermann.de

Data protection officer in the sense of the GDPR: Stefan Grunwald datenschutz@gut-edermann.de

Definitions

This privacy policy is based on terms used by the European Directive and Ordinance Maker when adopting the General Data Protection Regulation (GDPR). In order to ensure that this policy is comprehensible, we explain the terms used in advance. Insofar as you will find references to legal regulations below without the exact name of the respective law, the GDPR is meant.

Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Controller

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

Processing

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Third party

Third party means a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

Consent

Consent shall mean any freely given indication of the data subject’s wishes for the specific case in an informed and unambiguous manner, in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location.

Collection of general information

Information of a general nature is captured automatically if you access our website. This information (server logfiles) includes the type of browser, the operating system used, your Internet service providers’ domain name, your IP address and the like. This is exclusively information that allows no inferences pertaining to you as an individual. This information is technically necessary to correctly deliver the contents of web pages requested by you and is mandatory when using the internet. Anonymous information of this kind is statistically evaluated by us to optimise our internet presence and the underlying technology.

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred to your end device (laptop, tablet, smartphone, etc.) if you visit our website.

You can delete specific cookies or clear all cookies. You can also find information and guidance on how to delete these cookies or prevent them from being stored in the first place, depending on the browser you are using, via the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Storage time and cookies used:

Insofar as you consent to the use of cookies through your browser settings, the following cookies may be used on our websites:

Technically necessary cookies

Nature and purpose of the processing:

We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page break.

The purpose of using technical cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These require that the browser is recognised even after a page change.

Legal basis for data processing:

Processing takes place according to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in making our website user-friendly.

Recipients:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Objection

Please read the information about your right to object according to Art. 21 GDPR below.

Registration on our website

Nature and purpose of the processing:

For registration on our website, we require some personal data, which is transmitted to us via an input mask.

At the time of registration, the following additional data is collected:

Your registration is required for the provision of certain content and services on our website.

Legal basis: The processing of the data entered during registration is based on the user’s consent (Art. 6 (1) lit. a GDPR).

Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Retention period:

Data will only be processed in this context for as long as the corresponding consent has been obtained.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content.

Comment function

Nature and purpose of the processing:

When users leave comments on our website, the time of their creation and the user name selected by the website visitor are saved. This is for our security, as we may be prosecuted for any illegal content on our website, even if it was created by users.

Legal basis:

The processing of the data entered as a comment occurs on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR).

With the commentary feature, our aim is to provide you with an uncomplicated way to interact. The information you enter will be stored for the purpose of processing the request as well as possible follow-up enquiries.

Recipients:

Recipients of the data may be processors.

Retention period:

The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case when the communication with the user has ended and the company can see from the circumstances that the respective issue has been clarified. We reserve the right to deletion without citing reasons and without previous or subsequent notification.

You can also have your comment deleted by us at any time. To do so, please write an e-mail to the data protection officer listed below or the person responsible for data protection and submit the link to your comment as well as, for identification purposes, the e-mail address used when creating the comment.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.

Contact form

If you contact us through the contact options offered, some personal data such as name, address, contact and communication data such as telephone number and e-mail address are collected so that these can be used to process and respond to your request and for possible follow-up questions. This data will not be passed on to third parties without your consent. Personal data that is processed by us in the context of a general contact request by e-mail or contact form we store only as long as necessary for the respective correspondence.

Nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. This requires you to provide a valid e-mail address as well as your name. This is used to assign the request and for the subsequent response to the same. The provision of further data is voluntary.

Legal basis:

The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR).

With the comment form, our aim is to provide you with an uncomplicated way to interact. The information you enter will be stored for the purpose of processing the request as well as possible follow-up enquiries.

If you contact us to enquire about an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 (1) lit. b GDPR).

Recipients:

Recipients of the data may be processors.

Retention period:

Data will be deleted no later than six months after the request has been processed.

If a contractual relationship is established, we are subject to the legal storage periods of the German Commercial Code and will delete your data when these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you give us your name, your e-mail address and the reason for your enquiry.

Direct booking option on the hotel website

Booking systems

Personal data requested by us in connection with a room booking will only be stored for as long as is necessary for the fulfilment of the contract and any subsequent contract-related correspondence or, in the case of documents relevant under commercial and/or tax law that contain personal data, for as long as the statutory periods of the German Commercial Code and the German Fiscal Code provide for the storage of these documents. Legal basis for the processing of personal data in connection with a room booking: Personal data processed in connection with a room booking are necessary for the performance of the corresponding contract (Article 6 GDPR)

Direct booking option on a hotel website, combined with direct advertising via newsletter

Personal data that were requested by us in connection with a room booking are used for the fulfilment of the contract. Furthermore, we may also use your data for the purpose of direct advertising for similar offers, unless you have already expressed your objection to such usage of data. You can object to the use of your data for direct advertising purposes at any time. Your e-mail address will be saved for the newsletter as long as you do not object.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Deletion or blocking of data

We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.

Google

Use of Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will not associate your IP address with any other data stored by Google.

For more information on conditions of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=en.

On behalf of the website provider, Google uses this information for the purpose of evaluating your website usage, compiling reports on website activity for website operators, and to provide other services relating to website activity and internet usage to the website provider.

The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs will be automatically deleted after 14 months. Data for which the retention period has expired are automatically deleted once a month.

Right of withdrawal:

You can prevent tracking by Google Analytics on our website by clicking on the following link. An opt-out cookie will be set on your device. This prevents the collection of your data by Google Analytics during future visits to this website for as long as this cookie remains installed in your browser.

You can prevent the storage of the cookies by carrying out a corresponding setting in your browser software; however, we expressly inform you that you may not then be able to use the full scope of all of the features of our websites.

In addition, you can disable the collection of the data created by the cookies concerning your use of the website (including your IP address) and the processing of this data by Google if you download and install the browser plugin that is available under the following link: Browser add-on to deactivate Google Analytics.

Use of script libraries (Google Webfonts)

On this website we use Google Web Fonts to display our content correctly across browsers and in a graphically appealing manner. These are provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”).

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy statement: https://www.google.com/policies/privacy/.

Use of Google Maps

We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA (hereinafter “Google”). This enables us to show you interactive maps directly on the website and facilitate your use of the maps function.

You can find more information about data processing by Google in the Google privacy policy: https://policies.google.com/privacy. There you can also change your personal privacy settings in the Privacy Center.

For detailed instructions on how to manage your own data related to Google products, visit http://www.dataliberation.org.

When you visit our website, Google is informed that you have visited the corresponding subpages on our website. This takes place irrespective of whether you are logged in to a Google user account or whether you do not have an account with Google. If you are logged into your Google account, your data will be directly assigned to your account.

If you would like to prevent Google from assigning data to your account, please log out of your account prior to clicking on the button. Google saves your data as part of a user profile and uses it for advertising and market research purposes, and/or the needs-based design of its websites. This analysis is primarily carried out (even for users who are not logged in) to provide personalised advertising and inform other users of the social network about your activity on our website. You have the right to object to the creation of a user profile and must contact Google to this end.

Right of withdrawal:

The provider currently offers no option for a simple opt-out or blocking of data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or only to a limited extent.

Google AdWords

Our website uses Google Conversion Tracking. The operating company for the services of Google AdWords is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to personally identify users.

Right of withdrawal:

Use of Google Remarketing

This website uses the remarketing function of Google Inc. The operating company for the services of Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google“).

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when they visit websites that belong to the Google advertising network. On these sites, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function.

Right of withdrawal:

SSL encryption

We use state-of-the-art encryption procedures (e.g. SSL) via HTTPS to protect the security of your data during transmission.

Embedded YouTube videos

We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page with the YouTube plugin, a connection is established to YouTube servers. This will tell YouTube which pages you are visiting. If you are logged in to your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your Youtube account beforehand.

If a YouTube video is started, the provider uses cookies which collect information about the user behaviour.

Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the provider’s data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).

Right of withdrawal:

Social plugins

Facebook

Our website uses so-called social plugins of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Social Plug-in from Facebook” or “Facebook Social Plugin”. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the web page. Through the integration of the plugin, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or submitting a comment, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and, depending on your settings, displayed to your Facebook friends.

For the purpose and scope of data collection by Facebook and for further processing and use of your data there, as well as your rights in this regard and setting options to protect your privacy, we refer to Facebook’s data protection information at http://www.facebook.com/policy.php.

If you do not wish Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plugins from loading with add-ons for your browser, e.g. for Mozilla Firefox: https://addons.mozilla.org/en/firefox/addon/facebook-blocker/; for Chrome: https://chrome.google.com/webstore/detail/facebook-blocker/chlhacbfddknadmnmjmkdobipdpjakmc?hl=de

Facebook tracking pixel

We have also implemented a Facebook tracking pixel on our website from the provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. This enables us to track the activity of users after they have viewed or clicked on a Facebook advertisement. In this way we are able to gauge the effectiveness of Facebook advertisements for statistical and marketing purposes. Data collected in this way are anonymous to us, which means we cannot see the personal data of the individual users. However, Facebook stores and processes this data. Facebook can connect this data with your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s Data Policy. You can allow Facebook and its partners to place ads on and outside of Facebook. You have the option of denying Facebook and its partners permission to place ads. The settings for Facebook ads may be changed here: https://www.facebook.com/ads/website_custom_audiences/.

Instagram

Our website uses so-called social plugins (“plugins”) operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are currently not logged in to Instagram. This information (including your IP address) is sent from your browser directly to an Instagram server in the US and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example, by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information will also be posted on your Instagram account and displayed there to your contacts.

For the purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights in this respect and setting options for the protection of your privacy, please refer to the privacy policy of Instagram: https://help.instagram.com/155833707900388/.

If you do not wish Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. with the “NoScript” script blocker (http://noscript.net/).

Our website uses so-called social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”). These plugins can be recognised, for example, by buttons with the “Pint it” sign on a white or red background. An overview of the Pinterest plugins and their appearance can be found here: https://developers.pinterest.com/docs/getting-started/introduction/.

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The content of the plugin is transmitted directly to your browser by Pinterest and integrated into the page. Through the integration, Pinterest receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged in to Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there.

If you are logged in to Pinterest, Pinterest can immediately assign your visit to our website to your Pinterest profile. If you interact with the plugins, for example, by clicking on the “Pin it” button, the corresponding information is also sent directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Pinterest as well as your rights in this regard and setting options for protecting your privacy can be found in Pinterest’s data protection information: https://about.pinterest.com/de/privacy-policy.

If you do not wish Pinterest to directly assign the data collected via our website to your profile on Pinterest, you must log out of Pinterest before visiting our website. You can also completely prevent the Pinterest plugins from loading with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).

Flickr

Flickr is a service by Yahoo! EMEA Limited, 5–7 Point Village, North Wall Quay, Dublin 1, Ireland. Yahoo’s privacy policy can be viewed under the following link: http://info.yahoo.com/privacy/de/yahoo/.

AddThis

Use of AddThis plugins (e.g. “Share” button). Our website uses so-called social plugins (“plugins”) of the bookmarking service AddThis, which is operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA (“AddThis”). The plugins are usually marked with an AddThis logo, for example in the form of a white plus sign on an orange background. An overview of the AddThis plugins and their appearance can be found here: https://www.addthis.com/get/sharing.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the AddThis servers. The content of the plugin is transmitted by AddThis directly to your browser and integrated into the page. Through the integration, AddThis receives the information that your browser has accessed the corresponding page of our website and stores a cookie on your device to identify your browser. This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there. AddThis uses the data to create anonymous user profiles, which serves as the basis for a personalised and interest-based advertising approach of visitors to websites with AddThis plugins.

The purpose and scope of the data collection and the further processing and use of the data by AddThis can be found in the data protection information of AddThis: http://www.addthis.com/privacy/privacy-policy.

If you would like to object to the collection of data by AddThis for the future, you can set a so-called opt-out cookie, which you can download under the following link: http://www.addthis.com/privacy/opt-out.

You can also completely prevent the loading of AddThis plugins with add-ons for your browser, i.e. with the script blocker “NoScript” (noscript.net/).

ShareThis

Our website uses so-called social plugins (“plugins”) of the social network ShareThis, which is operated by ShareThis, Inc., 4005 Miranda Avenue Suite 100, Palo Alto, CA 94304-1227 USA (“ShareThis”). These plugins are e.g. buttons with a white arrow against a green background. For an overview of ShareThis plugins and their appearance please visit http://www.sharethis.com/get-sharing-tools.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the ShareThis servers. The content of the plugin is transmitted by ShareThis directly to your browser and integrated into the page. Through this integration, ShareThis receives the information that your browser has accessed the corresponding page of our website and stores a cookie on your device to identify your browser. This information (including your IP address) is transmitted directly from your browser to a ShareThis browser in the USA and stored there. ShareThis uses the data to create anonymous user profiles, which serves as the basis for a personalised and interest-based advertising approach of visitors to websites with ShareThis plugins.

The purpose and scope of the data collection and the further processing and use of the data by ShareThis can be found in the data protection information of ShareThis: http://www.sharethis.com/privacy/.

You can also completely prevent the ShareThis plugins from loading with add-ons for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).

Newsletter

Nature and purpose of the processing:

To deliver our newsletter we collect personal data, which is transmitted to us via an input mask.

For an effective registration we require a valid e-mail address. In order to verify that the owner of the e-mail address has in fact carried out a subscription we employ the double opt-in procedure. For this, we log the subscription of the newsletter, the sending of a confirmation e-mail and the receipt of the reply required by the confirmation e-mail. No further data is collected.

Legal basis:

On the basis of your expressly given consent (Art. 6 (1) (a) GDPR), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.

Recipients:

Recipients of the data may be processors.

Retention period:

The data will be processed only in this context for as long as the relevant consent is given. After that, it will be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Right of withdrawal:

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. The cancellation can be requested via the link contained in every e-mail or from the data protection officer listed below or the person responsible for data protection.

Competitions

On our website, you have the opportunity to participate in competitions organised by our hotel. The data provided on the competition form will be solely used for the purpose of determining a winner. For this purpose, we log the completed participation form (data entered in the input mask during registration, such as title, first name, last name, e-mail address), the sending of a confirmation e-mail, and the receipt of the required reply. No further data is collected. The data is used exclusively for the duration of the competition and is not passed on to third parties. After the end of the competition, your data will be deleted.

External links

Our website contains links to external websites of third parties over whose content we have no influence. The operators of the respective websites are responsible for the information contained on the linked sites. At the time the links were created, no unlawful content was discernible, but it is not possible for us to constantly monitor the content of the linked pages.

Your rights to information, rectification, restriction of processing, erasure, and objection

Right to information

Under Article 15 of the GDPR, you have the right to obtain confirmation as to whether or not personal data concerning you are being processed. If this is the case, you have a right to information about the processed information.

Right to withdrawal of consent

Where processing of your personal data is based on consent, under Article 7 of the GDPR you have the right to withdraw this consent at any time.

Right to object

Where the processing of your personal data is required to safeguard the legitimate interests of our company, you have the right to object to processing according to Article 21 of the GDPR.

Right to erasure

If you have withdrawn your consent, if you have objected to the processing of your personal data (and there are no overriding legitimate reasons for the processing), if your personal data are no longer necessary for the purposes of the processing, if there is a legal obligation to do so, or if your personal data have been processed unlawfully, you have the right to request the erasure of your personal data in accordance with Article 17 of the GDPR.

Right to rectification

If your personal data has been processed incorrectly, you have the right to demand the rectification of this data immediately in accordance with Article 16 of the GDPR.

Right to restriction of processing

Under Article 18 of the GDPR you have the right to request that the processing of your personal data be restricted.

Right to data portability

Under Article 20 of the GDPR, you have the right to receive personal data provided by you in a structured, commonly-used and machine-readable format.

Right to lodge a complaint

Under Article 77 of the GDPR, you have the right to lodge a complaint with the responsible supervisory authority. The address of the supervisory authority is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Telephone +49 (0) 981 53 1300.

Changes to our privacy policy

We reserve the right to adapt this privacy policy from time to time so that it fulfils the latest statutory requirements or in order to reflect changes to our services within the privacy policy, such as when introducing new services. Your subsequent website access will then be subject to the new privacy policy.