Privacy policy
1. data protection at a glance
General information
The following information provides a simple overview of
what happens to your personal data when you visit this website. Personal data is
all data with which you can be personally identified. Detailed information on the
topic of data protection can be found in our data protection
data protection declaration.
Data collection on this website
Who is responsible for data collection on this website?
website?
Data processing on this website is carried out by the website operator. The operator’s
contact details can be found in the section “Information on the controller” in this
privacy policy.
How do we collect your data?
Your data is collected
collected by you communicating it to us. This may, for example, be data that you enter in a contact form.
contact form.
Other data is collected automatically or with your consent when you visit
collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser,
operating system or time of the page view). This data is collected automatically as soon as you enter this website.
enter this website.
What do we use your data for?
Some of the data is collected in order to
ensure error-free provision of the website. Other data can be used to analyze your
user behavior.
What rights do you have with regard to your data?
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your
stored personal data at any time. You also have the right to request the rectification or
deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. You also have the right
under certain circumstances, to request the restriction of the processing of your personal data.
demand the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
to.
You can contact us at any time regarding this and other questions on the subject of data protection
at any time.
2. Hosting
We host the content of our website with the following provider:
External hosting
This website is hosted externally. The personal data that is collected on this website
website are stored on the servers of the hoster(s). This may include
mainly IP addresses, contact requests, meta and communication data, contract data, contact details,
names, website accesses and other data generated via a website.
The
external hosting is carried out for the purpose of fulfilling the contract with our potential and existing
potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient
provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Insofar as
a corresponding consent has been requested, the processing is carried out exclusively on the basis of
Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent allows the storage of cookies or
access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the
TTDSG. Consent can be revoked at any time.
Our hoster(s) will only process your data
only process your data to the extent that this is necessary to fulfill its performance obligations and our
instructions with regard to this data.
We use the following host(s):
Cloudflare Germany GmbH
Rosental 7
80331 Munich, Germany
3 General notes and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously.
seriously. We treat your personal data confidentially and in accordance with the statutory data protection
data protection regulations and this privacy policy.
When you use this website
various personal data are collected. Personal data is data with which you
can be personally identified. This privacy policy explains
what data we collect and what we use it for. It also explains how and for what purpose this
happens.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail)
communication by e-mail) may have security gaps. Complete protection of the data from
access by third parties is not possible.
Note on the responsible body
The controller responsible for data processing on
this website is
Kerstin Wagner
Seulbitzer Straße 41
95448 Bayreuth
Telephone: 0163-7161236
E-mail: info@ferienwohnung-wagner-bayreuth.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the
the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage duration
Unless a more specific storage period has been specified in this privacy policy
your personal data will remain with us until the purpose for the data processing no longer applies.
ceases to apply. If you assert a justified request for deletion or revoke your consent to data processing, your
data processing, your data will be deleted unless we have other legally permissible reasons for
reasons for storing your personal data (e.g. retention periods under tax or commercial law).
retention periods under tax or commercial law); in the latter case, the deletion will take place after these
of these reasons.
General information on the legal basis for data processing on this website
If you
have consented to data processing, we process your personal data on the basis of Art.
6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data pursuant to Art. 9 para. 1 GDPR
are processed. In the event of express consent to the transfer of personal data to third
data to third countries, the data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR.
If you have consented to the storage of cookies or access to information in your end device (e.g. via
device fingerprinting), the data processing is also carried out on the basis of Section
25 para. 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfill a contract or to
performance of pre-contractual measures, we process your data on the basis of
Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfill a legal
legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. The data processing
may also be carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. About the
relevant legal bases in each individual case are set out in the following paragraphs of this
privacy policy.
Note on the transfer of data to third countries that are not secure under data protection law and the transfer to US
companies that are not DPF-certified
Among other things, we use tools from companies
based in third countries that are not secure under data protection law and US tools whose providers are not certified under the EU-US Data
Privacy Framework (DPF) are certified. If these tools are active, your personal data may be transferred
transferred to these countries and processed there. We would like to point out that in third countries
countries cannot guarantee a level of data protection comparable to that in the EU.
We
point out that the USA, as a safe third country, generally has a level of data protection comparable to the EU.
level of data protection. Data transfer to the USA is therefore permitted if the
recipient is certified under the “EU-US Data Privacy Framework” (DPF) or has suitable additional
has suitable additional guarantees. Information on transfers to
third countries, including the data recipients, can be found in this
privacy policy.
Recipients of personal data
Within the scope of our
business activities, we work together with various external bodies. In some cases this also
personal data must be transmitted to these external bodies. We only pass on
personal data to external bodies only if this is necessary in the context of fulfilling a contract, if we are
contract, if we are legally obliged to do so (e.g. transfer of data to tax authorities), if we have a
tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 para. 1 lit. f GDPR
or if another legal basis permits the transfer of data. When using contract processors
we only pass on personal data of our customers on the basis of a valid contract for
order processing. In the case of joint processing, a joint processing contract is concluded.
processing is concluded.
Revocation of your consent to data processing
Many data processing operations are
only possible with your express consent. You can withdraw consent that you have already given
revoked at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
revocation remains unaffected.
Right to object to the collection of data in special cases and to direct marketing (Art. 21
GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F
GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR
PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS
PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN
THIS PRIVACY POLICY. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR
WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING
WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING
THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE
PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS
LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).
IF YOUR
PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE
RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH
DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING,
INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT,
YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT
DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of
violations of the GDPR, data subjects have the right to lodge a complaint with a
supervisory authority, in particular in the Member State of their habitual residence, place of work
place of work or the place of the alleged infringement. The right to lodge a complaint exists
without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process on the basis of
your consent or in fulfillment of a contract, to yourself or to a third party in a common, machine-readable format.
in a commonly used, machine-readable format. If you request the direct
transfer of the data to another controller, this will only be done to the extent that it is technically
feasible.
Information, correction and deletion
Within the framework of the applicable legal
right to receive information free of charge at any time about your stored personal data, its origin and
data, its origin and recipients and the purpose of the data processing and, if applicable, a right to
correction or deletion of this data. You can contact us at any time if you have any further questions about
data, you can contact us at any time.
Right to restriction of processing
You have the right to request the restriction of
processing of your personal data. You can contact us at any time to do this.
The right to restriction of processing exists in the following cases:
- If you dispute the
the accuracy of your personal data stored by us, we usually need time to check this,
to check this. For the duration of the review, you have the right to
request the restriction of the processing of your personal data. - If the
processing of your personal data was/is carried out unlawfully, you may request the restriction of data
request the restriction of data processing instead of erasure. - If we no longer need your
no longer need your personal data, but you need it for the exercise, defense or assertion of legal
assertion of legal claims, you have the right to demand the restriction of the processing of your
restriction of the processing of your personal data. - If you have lodged an
objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours.
interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the
right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its
data – apart from its storage – only with your consent or for the establishment, exercise
exercise or defense of legal claims or for the protection of the rights of another natural or legal person
natural or legal person or for reasons of important public interest of the European Union or of a Member State.
European Union or a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of
transmission of confidential content, such as orders or inquiries that you send to us as the site operator.
site operator, uses SSL or TLS encryption. You can recognize an encrypted connection
by the fact that the address line of the browser changes from “http://” to “https://” and
the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send to us
the data that you transmit to us cannot be read by third parties.
Objection to advertising e-mails
The use of contact data published in the context of the imprint obligation
published contact data for the purpose of sending unsolicited advertising
and information material is hereby prohibited. The operators of this website expressly reserve the
legal steps in the event of the unsolicited sending of advertising information, such as spam e-mails,
before.
4. data collection on this website
Cookies
Our Internet pages use so-called “cookies”. Cookies are small
data packets and do not cause any damage to your end device. They are either stored temporarily
for the duration of a session (session cookies) or permanently (permanent cookies) on your end device.
stored. Session cookies are automatically deleted at the end of your visit. Permanent cookies
remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
deletion by your web browser.
Cookies may originate from us (first-party cookies) or
from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain
services of third-party companies within websites (e.g. cookies for processing payment services).
payment services).
Cookies have various functions. Many cookies are technically necessary
necessary, as certain website functions would not work without them (e.g. the shopping cart
shopping cart function or the display of videos). Other cookies can be used to analyze user
user behavior or for advertising purposes.
Cookies that are required to carry out the
electronic communication process, to provide certain functions that you have requested (e.g. for the shopping cart
(e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience).
of the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f DSGVO
unless another legal basis is specified. The website operator has a legitimate interest
interest in the storage of necessary cookies for the technically error-free and optimized provision
of its services. If consent to the storage of cookies and comparable recognition technologies
recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent
consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and
allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and
and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, the functionality of this website may be restricted.
You can find out which cookies and services are used on this website in this
privacy policy.
Server log files
The provider of the pages automatically collects and stores information in so-called
so-called server log files, which your browser automatically transmits to us. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
Eine Zusammenführung dieser Daten mit anderen Datenquellen wird nicht vorgenommen.
Die
Erfassung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein
berechtigtes Interesse an der technisch fehlerfreien Darstellung und der Optimierung seiner Website –
hierzu müssen die Server-Log-Files erfasst werden.
Kontaktformular
Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre
Angaben aus dem Anfrageformular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung
der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten geben wir nicht ohne Ihre
Einwilligung weiter.
Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO,
sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur Durchführung
vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht die Verarbeitung auf
unserem berechtigten Interesse an der effektiven Bearbeitung der an uns gerichteten Anfragen (Art. 6 Abs. 1 lit. f
DSGVO) oder auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) sofern diese abgefragt wurde; die Einwilligung ist
jederzeit widerrufbar.
Die von Ihnen im Kontaktformular eingegebenen Daten verbleiben bei uns, bis Sie
uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die
Datenspeicherung entfällt (z. B. nach abgeschlossener Bearbeitung Ihrer Anfrage). Zwingende
gesetzliche Bestimmungen – insbesondere Aufbewahrungsfristen – bleiben unberührt.
Anfrage per E-Mail, Telefon oder Telefax
Wenn Sie uns per E-Mail, Telefon oder Telefax
kontaktieren, wird Ihre Anfrage inklusive aller daraus hervorgehenden personenbezogenen Daten (Name, Anfrage)
zum Zwecke der Bearbeitung Ihres Anliegens bei uns gespeichert und verarbeitet. Diese Daten geben wir nicht ohne
Ihre Einwilligung weiter.
Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b
DSGVO, sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur
Durchführung vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht
die Verarbeitung auf unserem berechtigten Interesse an der effektiven Bearbeitung der an uns gerichteten
Anfragen (Art. 6 Abs. 1 lit. f DSGVO) oder auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) sofern diese abgefragt
wurde; die Einwilligung ist jederzeit widerrufbar.
Die von Ihnen an uns per Kontaktanfragen
übersandten Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur
Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z. B. nach
abgeschlossener Bearbeitung Ihres Anliegens). Zwingende gesetzliche Bestimmungen – insbesondere
gesetzliche Aufbewahrungsfristen – bleiben unberührt.
5. Analyse-Tools und Werbung
WP Statistics
Diese Website nutzt das Analysetool WP Statistics, um Besucherzugriffe statistisch
auszuwerten. Anbieter ist Veronalabs, Tatari 64, 10134, Tallinn, Estland (https://veronalabs.com).
Mit WP Statistics können
wir die Nutzung unserer Website analysieren. WP Statistics erfasst dabei u. a. Logdateien (IP-Adresse,
Referrer, verwendete Browser, Herkunft des Nutzers, verwendete Suchmaschine) und Aktionen, die die
Websitebesucher auf der Seite getätigt haben (z. B. Klicks und Ansichten).
Die mit WP
Statistics erfassten Daten werden ausschließlich auf unserem eigenen Server gespeichert.
Die
Nutzung dieses Analyse-Tools erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Wir haben ein berechtigtes
Interesse an der anonymisierten Analyse des Nutzerverhaltens, um sowohl unser Webangebot als auch unsere
Werbung zu optimieren. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung
ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die
Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers
(z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.
IP-Anonymisierung
Wir verwenden WP Statistics mit anonymisierter IP. Ihre IP-Adresse wird dabei
gekürzt, sodass diese Ihnen nicht mehr direkt zugeordnet werden kann.
6. Plugins und Tools
Google Fonts (lokales Hosting)
Diese Seite nutzt zur einheitlichen Darstellung von Schriftarten so
genannte Google Fonts, die von Google bereitgestellt werden. Die Google Fonts sind lokal installiert. Eine
Verbindung zu Servern von Google findet dabei nicht statt.
Weitere Informationen zu Google Fonts finden
Sie unter https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.
Font Awesome (lokales Hosting)
Diese Seite nutzt zur einheitlichen Darstellung von Schriftarten
Font Awesome. Font Awesome ist lokal installiert. Eine Verbindung zu Servern von Fonticons, Inc. findet dabei nicht
statt.
Weitere Informationen zu Font Awesome finden Sie in der Datenschutzerklärung für Font
Awesome unter: https://fontawesome.com/privacy.
Google Maps
Diese Seite nutzt den Kartendienst Google Maps. Anbieter ist die Google Ireland
Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.
Zur Nutzung der
Funktionen von Google Maps ist es notwendig, Ihre IP-Adresse zu speichern. Diese Informationen werden in der
Regel an einen Server von Google in den USA übertragen und dort gespeichert. Der Anbieter dieser Seite hat
keinen Einfluss auf diese Datenübertragung. Wenn Google Maps aktiviert ist, kann Google zum Zwecke der
einheitlichen Darstellung der Schriftarten Google Fonts verwenden. Beim Aufruf von Google Maps lädt Ihr
Browser die benötigten Web Fonts in ihren Browsercache, um Texte und Schriftarten korrekt
anzuzeigen.
Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer
Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt
ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Sofern eine entsprechende Einwilligung
abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und
§ 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im
Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist
jederzeit widerrufbar.
Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der
EU-Kommission gestützt. Details finden Sie hier: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Mehr Informationen
zum Umgang mit Nutzerdaten finden Sie in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.
Das Unternehmen verfügt über eine Zertifizierung nach dem „EU-US Data Privacy
Framework“ (DPF). Der DPF ist ein Übereinkommen zwischen der Europäischen Union und den
USA, der die Einhaltung europäischer Datenschutzstandards bei Datenverarbeitungen in den USA
gewährleisten soll. Jedes nach dem DPF zertifizierte Unternehmen verpflichtet sich, diese
Datenschutzstandards einzuhalten. Weitere Informationen hierzu erhalten Sie vom Anbieter unter folgendem Link:
https:/
/www.dataprivacyframework.gov/s/participant-search/participant-
detail?contact=true&id=a2zt000000001L5AAI&status=Active
Wordfence
Wir haben Wordfence auf dieser Website eingebunden. Anbieter ist Defiant Inc.,
Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (nachfolgend „Wordfence“).
Wordfence dient dem Schutz unserer Website vor unerwünschten Zugriffen oder bösartigen
Cyberattacken. Zu diesem Zweck stellt unsere Website eine dauerhafte Verbindung zu den Servern von Wordfence
her, damit Wordfence seine Datenbanken mit den auf unserer Website getätigten Zugriffen abgleichen und
ggf. blockieren kann.
Die Verwendung von Wordfence erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO.
Der Websitebetreiber hat ein berechtigtes Interesse an einem möglichst effektiven Schutz seiner Website vor
Cyberattacken. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung
ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die
Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers
(z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.
Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission
gestützt. Details finden Sie hier: https://www.wordfence.com/help/general-data-protection-
regulation/.
Auftragsverarbeitung
Wir haben einen Vertrag über Auftragsverarbeitung (AVV) zur Nutzung
des oben genannten Dienstes geschlossen. Hierbei handelt es sich um einen datenschutzrechtlich vorgeschriebenen
Vertrag, der gewährleistet, dass dieser die personenbezogenen Daten unserer Websitebesucher nur nach
unseren Weisungen und unter Einhaltung der DSGVO verarbeitet.
Quelle: https://www.e-recht24.de