Privacy policy

Information about the processing of your data

In accordance with Art. 12 of the General Data Protection Regulation (hereinafter: GDPR), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data and your legal rights in this regard.

We reserve the right to amend the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or relevant case law.

We recommend that you read the privacy policy from time to time and keep a printout or copy for your records.

Definitions

• ‘Website’ or ‘Internet presence’ refers to all pages of the controller at https://www.travelcircus.de as well as partner sites such as https://experiences.lidl-reisen.de
• ‘Personal data’ refers to all information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data therefore includes, for example, a person's name, email address and telephone number, but may also include data about preferences, hobbies and memberships.
• ‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.
• ‘Pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
• ‘Consent’ means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• ‘Google’ refers to Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; in the European Union, Google can be reached at: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope of application

The privacy policy applies to all pages of https://www.travelcircus.de and partner sites such as https://experiences.lidl-reisen.de. It does not extend to any linked websites or internet presences of other providers.

Responsible provider

The following is responsible for the processing of personal data within the scope of this privacy policy:

Questions about data protection

If you have any questions about data protection in relation to our company or our website, please contact our data protection officer:

Fresh Compliance GmbH
Data Protection Officer
Frank Trautwein

Postal address:

Or at:

Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights with regard to your personal data, which you can assert against us:

• Right to information (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to processing (Art. 21 GDPR),
• Right to withdraw your consent (Art. 7(3) GDPR),
• Right to receive the data in a structured, commonly used, machine-readable format (‘data portability’) and right to transfer the data to another controller if the conditions of Art. 20(1)(a), (b) GDPR are met (Art. 20 GDPR)

You can assert your rights by contacting the contact details listed in the ‘Responsible provider’ section or by contacting the data protection officers appointed by us.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

Use of the website, access data

You can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This includes the following data:

• Browser type/browser version
• Operating system used
• Language and version of the browser software
• Host name of the accessing device
• IP address
• Website from which the request originates
• Content of the request (specific page)
• Date and time of the server request
• Access status/HTTP status code
• Referrer URL (the previously visited page)
• Amount of data transferred
• Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address by the system is necessary to enable the website to be delivered to your computer. Processing of your IP address for the duration of the session is required for this purpose. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The access data is not used to identify individual users and is not merged with other data sources. The access data is deleted when it is no longer required for the purpose of its processing. In the case of data collection for the provision of the website, this is the case when you end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context either. The data is generally deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or anonymised so that it is no longer possible to identify the client accessing the website.

The collection of data for the provision of the website and the processing of data in log files is essential for the operation of the website. You can object to the processing. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.

Cookies

In addition to the aforementioned access data, when you use the website, so-called cookies are stored in the internet browser of the terminal device you are using. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute programmes. They serve to make our website user-friendly. The use of cookies may be technically necessary or may be used for other purposes (e.g. analysis/evaluation of website usage).

a) Technically necessary cookies

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

• Language settings
• Items in the shopping basket
• Login information

The user data collected by technically necessary cookies is not processed to create user profiles. We also use so-called ‘session cookies’, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are necessary for the use of the website. In particular, they enable us to recognise the device you are using when you return to the website. We use this cookie to recognise you on subsequent visits to the website if you have an account with us; otherwise, you would have to log in again each time you visit. The legal basis for this processing is Art. 6 (1) (f) GDPR. We use session cookies to make the use of the website more attractive and effective. Session cookies are deleted as soon as you log out or close your browser.

Most browsers are set to automatically accept cookies. You can object to the processing of your data by cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

b) Cookies that are not technically necessary

We also use cookies on the website that enable us to analyse the surfing behaviour of users. The following data, for example, is stored and processed in the cookies:

• Search terms entered
• Frequency of page views
• Use of website functions

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Cookies that are not technically necessary are automatically deleted after a specified period, which may vary depending on the cookie.

You can object to the processing of your data by cookies. If you do not wish to use cookies, you can change your browser settings to block cookies generally or selectively, or to remove cookies that have already been stored. You can also display corresponding information before a cookie is set. If you change your browser settings for the use of cookies or deactivate cookies, the functionality of this website may be limited.

If we integrate third-party cookies into our website, we will inform you separately below.

c) Flash cookies

HTML5 storage objects are also used, which are stored on the device you are using (‘Flash cookies’). These process the necessary data independently of the browser used and do not have an automatic expiry date. The legal basis for this processing is Art. 6 (1) (f) GDPR. These cookies are used to make the use of the website more efficient and attractive.

You can object to the processing of your data by cookies. The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the settings of the Flash Player. If you do not want Flash cookies to be used, please install a corresponding add-on in the browser you are using, e.g. ‘Better Privacy’ for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) . You can also prevent the use of Flash cookies by opening your browser in ‘private mode’. In addition, you can regularly delete cookies and your browser history manually.

d) Cookie banner notice

When you visit the website, an information banner informs you about the use of cookies for analysis purposes and refers you to this privacy policy. In this context, there is also a note on how to prevent cookies from being stored in your browser settings.

Contacting our company

When you contact our company, e.g. by e-mail or via the contact form on the website, we will process the personal data you provide in order to respond to your enquiry.

A valid e-mail address is required to process enquiries via the contact form on the website. When you send us a message, the following data is also processed:

• IP address
• Date/time of registration

The legal basis for processing is Art. 6 (1) (1) (f) GDPR or Art. 6 (1) (1) (b) GDPR if the purpose of the contact is to conclude a contract.

The processing of personal data from the input mask serves solely to process the contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data will be processed exclusively for the purpose of processing the conversation. We will delete the data collected in this context once processing is no longer necessary, or restrict processing to compliance with existing statutory retention obligations.

You have the option to object to the processing of your personal data for contact enquiries at any time. This is the case if the processing is not necessary for the fulfilment of a contract with you, which is described by us in the previous description of the functions. In such a case, the processing of the enquiry may not be continued. In the event of your justified objection, we will examine the situation and either cease or adapt the data processing or point out to you our compelling legitimate grounds on the basis of which we will continue the processing.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and to the extent necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this is Art. 6 (1) (b) GDPR.

Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked or deleted for further processing, unless we are entitled to further storage and processing in the respective context on the basis of your consent (e.g. consent to the processing of your email address for the purpose of sending electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of legitimate interests (e.g. storage for the enforcement of claims).

Your personal data will be passed on if

• it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. when data is passed on to a payment service provider/shipping company for the purpose of processing a contract with you) (Art. 6 (1) (b) GDPR), or
• a subcontractor or vicarious agent whom we use exclusively in the context of providing the offers or services you have requested requires this data (unless you are expressly informed otherwise, such auxiliary persons are only authorised to process the data to the extent necessary for the provision of the offer or service) or
• an enforceable official order (Art. 6 (1) (c) GDPR) exists or
• an enforceable court order exists (Art. 6 (1) (c) GDPR) or
• we are obliged to do so by law (Art. 6(1)(c) GDPR) or
• processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6(1)(d) GDPR) or
• we are authorised or even obliged to disclose the data in order to pursue overriding legitimate interests (Art. 6(1)(f) GDPR).

Your personal data will not be disclosed to other persons, companies or organisations unless you have given your effective consent to such disclosure. The legal basis for processing is then Art. 6 (1) (a) GDPR.

Processing and disclosure of personal data in the online ordering system

If you wish to place an order or make a booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and email address. The mandatory information required for order and contract processing is marked separately; further information is provided voluntarily. We process your data for order processing, for which purpose we will forward payment data in particular to the payment service provider you have selected or to our house bank. As part of your booking or booking enquiry, the booking information will also be transferred to external operators of internet booking engines (e.g. TourOnline AG, Borsigstraße 26, 73249, Wernau ‘DIRS 21’) for the purpose of fulfilling or preparing the contract. The legal basis for the processing is Art. 6 (1) (b) GDPR. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account in which we store your data for future visits to the website. When you create a customer account, the data you provide will be processed. You can edit or delete all other data, including your customer account, yourself after successfully logging in.

We delete the data collected in this context once it is no longer necessary to store it, or restrict its processing if there are legal retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. Two years after the end of the contract, we restrict processing and reduce it to compliance with existing legal obligations.

Application process

We are delighted that you are interested in our company and have applied or are applying for a position with us. We would like to provide you with information below about the processing of your personal data in connection with your application. We process the data necessary for the online application process (name, email address and location) as well as data that you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process.

The legal basis for the processing of your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) in the version applicable from 25 May 2018. According to this, the processing of data that is necessary in connection with the decision to establish an employment relationship is permissible. If the data is required for legal purposes after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular for the purpose of safeguarding legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending claims.

Applicants' data will be deleted after 6 months in the event of rejection. If you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted after two years. If you are offered a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

We use a specialised software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing agreement with this provider, which ensures that data processing is carried out in a permissible manner.

Your application data will be reviewed by the Human Resources department after we receive your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective vacant position. The next steps will then be coordinated. Within the company, only those persons who need your data for the proper execution of our application process have access to it.

You have the right to object to the processing of your data at any time. This is the case if the processing is not necessary to fulfil a contract with you, which is described in the previous description of the functions. In the event of your justified objection, we will review the situation and either stop or adjust the data processing or show you our compelling legitimate reasons for continuing the processing.

Email marketing

Existing customer advertising

We reserve the right to process the email address you provided during the booking process in accordance with the statutory provisions in order to send you the following content by email during or after the contract has been processed, provided that you have not already objected to this processing of your email address:

• other interesting offers from our portfolio,
• events organised by our company,
• technical information,
• questions about special requests,
• an overview of possible leisure activities,
• information on how to get there by public transport.

Legal basis for processing: Art. 6(1)(f) GDPR. We carry out the aforementioned processing for customer care and to improve our services. We delete your data when you unsubscribe from the newsletter, but no later than two years after the end of the contract.

Furthermore, we process the evaluation of the order/booking based on user interests. If the sending of electronic information is not necessary for contract processing (e.g. e-mail with payment information), the legal basis for processing is Art. 6 (1) (f) GDPR. We carry out the aforementioned processing to optimise our services and website.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do so, click on the unsubscribe link in the newsletter or send your objection to the contact details listed in the section ‘Responsible provider/representative of the provider in the European Union’.

Newsletter

You have the option of subscribing to our email newsletter, WhatsApp newsletter, Facebook Messenger newsletter, Instagram newsletter, Telegram newsletter and browser push notifications on the website, which we use to regularly inform you about the following content:

• Offers from our portfolio,
• Events organised by our company,
• Offers (including events) from third parties, provided you have given your consent.
• Special offers/limited-time offers

The following personal data is required to receive the newsletter:

• Valid email address
• Telephone number, if applicable

Registration for our email newsletter is carried out using a double opt-in procedure. After you have entered the data marked as mandatory, we will send an email to the email address you have provided, asking you to expressly confirm your registration for the newsletter (by clicking on a confirmation link) . This allows us to ensure that you actually wish to receive our email newsletter. If confirmation is not received within 24 hours, we will block the information transmitted to us and delete it automatically after one month at the latest.

Furthermore, the following data is also processed at the time of subscription:

• IP address
• Date/time of newsletter registration,
• Time of your confirmation of the confirmation link,

We process your IP address, the time of your newsletter registration and the time of your confirmation in order to document your newsletter registration and prevent misuse of your personal data. The legal basis for processing is Art. 6(1)(1)(f) GDPR. We process this data until two years after the end of the contract. If the newsletter subscription takes place outside of a contract, we process this data until two years after the end of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the email address of the recipient concerned for the purpose of sending our email newsletter. The legal basis for processing is Art. 6 (1) (1) (a) GDPR. We delete this data when you unsubscribe from the newsletter.

You can revoke your consent to the processing of your email address for the purpose of receiving the newsletter at any time, either by sending us a message (see the contact details in the section ‘Responsible provider/representative of the provider in the European Union’) or by clicking on the unsubscribe link contained in the newsletter.

Please note that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files integrated into our website. For the evaluations, we link the data mentioned in the section ‘Access data’ and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID.

We use the data obtained to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them, and use this information to deduce your personal interests. We link this data to your actions on our website. The information is processed for as long as you are subscribed to the newsletter. After you unsubscribe, we process the data purely statistically and anonymously.

Our aim is to evaluate the use and optimisation of the email advertising we send you. The legal basis for processing is Art. 6 (1) (f) GDPR.

You can object to this tracking at any time by clicking on the separate unsubscribe link provided in each newsletter or by informing us using the contact details provided in the section ‘Responsible provider’ section. You can also prevent tracking by deactivating the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

Email marketing service ‘Bloomreach’

We use the email marketing service ‘Bloomreach’ from Bloomreach B.V., Fred. Roeskestraat 1091076 EE, Amsterdam, Netherlands, website: https://www.bloomreach.com/de , hereinafter referred to as ‘Bloomreach’. Bloomreach is a service that can be used to organise and analyse newsletter distribution.

We have concluded a data processing agreement with Bloomreach in accordance with Art. 28 GDPR.

Further information on Bloomreach's data protection can be found at https://www.bloomreach.com/en/legal/services-privacy-notice.

For the purpose of customer matching and displaying personalised advertising, we create so-called customer match lists, in which your data may be passed on from Bloomreach to our partners. For the use of customer match lists, encrypted (‘hashed’) user data (email address, telephone number, postal address, customer-specific identifiers) is transmitted to our partners and uploaded there. Our partners then compare whether the transmitted user data matches their existing customer data. This in turn can be used to create target groups that can be used for the delivery of advertisements/campaigns. The matching process can take up to 48 hours. Once the matching process is complete and compliance with the guidelines has been verified, your data will be deleted.

Payment Service Provider (PSP)

PayPal

We offer payment via PayPal on our website. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: ‘PayPal’).

If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal. Your data will be transmitted to PayPal on the basis of Art. 6 (1) (b) GDPR (processing for the performance of a contract). We have no knowledge of the storage period at PayPal and have no influence over it.

Transfer of personal data for credit card payments

Your personal data will only be transferred to the extent necessary for the execution of the contract. In particular, for payment processing, we will transfer the necessary payment data to the credit institution responsible for the payment or to the payment and invoicing service provider commissioned by us, if applicable.

Processing is carried out on the basis of Art. 6 (1) (b) GDPR (processing for the performance of a contract). The data required for payment processing is transmitted securely using the ‘SSL’ procedure and is processed exclusively for payment processing. We delete the data collected in this context once it is no longer necessary to store it, or restrict its processing if there are legal retention obligations.

Transfer of personal data for ‘purchase on account’

In the case of payment on account, we reserve the right to forward the data you provide when placing your order/booking to external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) for the purpose of carrying out a credit check.

This data is transferred on the basis of Art. 6 (1) (f) GDPR, as we make advance payments when purchasing on account and bear the risk of default. We delete the data collected in this context once it is no longer necessary to store it, or restrict its processing if there are legal retention obligations.

You can object to this processing at any time, but under certain circumstances the ‘purchase on account’ payment method will then no longer be available to you.

Klarna

If you select the ‘KLARNA’ payment method when making your booking, we will forward the data you have provided to Klarna Bank AB, German Branch, Chausseestraße 117, 10115 Berlin, via the payment service provider Checkout.com for payment processing.

With KLARNA, we use a direct transfer procedure in which a transfer can be completed and executed in real time during the ordering process. To do this, you will be redirected to the website of the payment service provider KLARNA.

The legal basis for the processing is Art. 6 (1) (b) GDPR. We have no knowledge of the storage period at Klarna and have no influence over it. For more information on the collection and processing of your data by SOFORT, please visit https://www.sofort.de/datenschutz.html.

Checkout.com

We also use Checkout as a payment service provider and, in the course of your booking, forward the payment method and the personal data collected to Checkout Ltd, 54 Portland Place, W1B 1DY, London (hereinafter ‘Checkout’). The legal basis for the processing is Art. 6 (1) (b) GDPR.

Checkout uses the transmitted data to process the payment and, if necessary, carries out an identity and credit check. To prevent and detect fraud, we transmit your IP address to Checkout for this purpose. Your IP address is stored by Checkout Ltd for 72 hours. Checkout has a legitimate interest in transferring the buyer's personal data and processes it in order to obtain information from credit agencies for the purpose of identity and credit checks, Art. 6 (1) (f) GDPR.

Mathematical and statistical methods are used in the credit check to calculate a rating regarding the probability of payment default (known as scoring). Checkout bases its decision on the provision of the respective payment methods on the calculated score. The score is calculated using recognised scientific methods.

In addition to address data, information on previous payment behaviour and probability values for expected future payment behaviour are also taken into account. We have no knowledge of the storage period at Checkout and have no influence over it. Further information can be found in Checkout's privacy policy at: https://www.checkout.com/legal/privacy-policy.

You can object to the processing of your personal data by Checkout at any time. However, Checkout remains entitled to process and disclose customer data if this is necessary for contractual payment processing (Art. 6(1)(b) GDPR) or required by law, official or court order (Art. 6(1)(c) GDPR).

Hosting

We use external hosting services to provide the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. All data necessary for the operation and use of our website is processed in this context.

We use external hosting services to operate this website. Our purpose in using external hosting services is to provide our website efficiently and securely. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The collection of data for the provision and use of the website and the processing of data via external web hosts is essential for the operation of the website. You can object to the processing. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.

Integration of third-party content

The website incorporates third-party content such as videos, maps, RSS feeds or graphics from other websites. This integration always requires the providers of this content (‘third-party providers’) to perceive the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore necessary for the display of this content.

We endeavour to use only third-party content providers who process the IP address solely for the purpose of delivering the content. However, we have no influence on whether third-party providers process IP addresses for statistical purposes, for example. To the extent that we are aware of this, we will clarify this below. Some third-party providers may process data outside the European Union.

You can object to this by installing a JavaScript blocker such as the browser plugin “NoScript” (www.noscript.net) or by deactivating JavaScript in your browser. However, this may result in functional restrictions on the website.

Google Web Fonts

We use so-called web fonts provided by Google for the uniform display of fonts. When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.

You can object to the processing by changing your browser settings so that the browser does not support web fonts – however, a standard font from your computer will then be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Bookmarks

Bookmarks, e.g. to social networks such as Facebook.com, Twitter.com, Google+, enable you as a user of certain social networks to create links from our website to your social network profiles in order to save them as bookmarks or share them with your contacts on social networks.

You can recognise the bookmarks on our website by the corresponding icons (e.g. ‘f’, ‘g+’) at the bottom of the page. When you open a page on our website, the bookmarks may store cookies on your device/browser. These are small text files with a sequence of numbers that enable the browser to be recognised. . If you are logged in to one of the social networks at the same time, this allows the operator of the social network to track which pages you visit, unless you have deactivated the acceptance and storage of cookies in your browser settings. When you use bookmarks, information is sent to the respective social network.

We do not control comments or activities of persons who use bookmarks for this purpose, nor can we be held responsible for them. Persons who share our content via bookmarks are not authorised to speak on behalf of us and our website or to give the impression of doing so to third parties.

The legal basis for the use of bookmarks is Art. 6 (1) (f) GDPR. We have no knowledge of further processing and storage periods on the part of social network operators and have no influence over these.

You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. You can also prevent the creation of user profiles in various ways and thus exercise your right to object:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies.

Google Tag Manager

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

YouTube videos

We use plug-ins from the video platform YouTube.de or YouTube.com on our website, a service operated by YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA; ‘YouTube’). The plug-ins allow us to embed visual content (‘videos’) that we have published on YouTube.de or YouTube.com on this website.

The videos are all integrated in ‘extended data protection mode’, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transferred. We have no influence on this data transfer.

When you visit the website, YouTube receives information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in the ‘Access data’ section is transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for processing is Art. 6 (1) (f) GDPR. The purpose of processing is to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at YouTube and have no influence on it.

You have the right to object to the processing, but you must contact YouTube to exercise this right. You can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Further information on the purpose and scope of processing by YouTube can be found in the privacy policy at https://www.google.de/intl/de/policies/privacy.

Integration of Google Maps

This website also uses Google's ‘Google Maps’ service to display maps or map sections, enabling you to conveniently use the map function on the website.

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in the ‘Access data’ section is transmitted to Google. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button.

Google stores your data as usage profiles and processes it for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation is carried out in particular (even for users who are not logged in) to provide advertising tailored to requirements and to inform other users of the social network about your activities on our website.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at Google and have no influence on it.

You have the right to object to the processing, but you must contact Google to exercise this right. You can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Further information on the purpose and scope of processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. For more information on the terms of use of Google Maps, please visit https://www.google.com/intl/de_de/help/terms_maps.html.

Services for statistical, analytical and marketing purposes

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised website experience. The third-party providers use cookies to control their services (see the ‘Cookies’ section above). Unless otherwise stated below, personal data is not processed.

Some of the third-party providers offer the option of directly objecting to the use of the respective service, e.g. by setting an opt-out cookie.

If you activate a corresponding opt-out cookie, the external provider will no longer process any data on your usage behaviour in future. It is also possible to selectively object to an individual selection of external services. If you change your browser or the device you are using, or if you delete all cookies, you will need to set the opt-out cookie again. You can also opt out of the use of cookies via the opt-out platform of the German Federal Association of the Digital Economy (BVDW) at http:// www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and opt-out options can also be found at the following link: http://www.youronlinechoices.com/de/.

Below, we provide information about the services of external providers currently used on our website, the purpose and scope of the respective processing in each individual case, and your existing options for objection.

Google Analytics

In order to tailor our website to your interests, we use Google Analytics, a web analytics service provided by Google. Google Analytics uses so-called ‘cookies’ (see the ‘Cookies’ section above), which are stored on your computer and enable an analysis of your use of the website. The information generated about your use of this website is transmitted to a Google server in the USA and processed there.

If IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension ‘anonymizeIp()’. This means that IP addresses are truncated before being processed, thus ruling out the possibility of personal references. If the data collected about you is personal, it will be immediately excluded and the personal data will be deleted immediately.

We use Google Analytics to analyse the use of our website and to improve it regularly. The statistics enable us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of Google Analytics is Art. 6 (1) (1) (f) GDPR. The analytics cookies are deleted after fourteen months at the latest.

You have the right to object. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information from the third-party provider Google can be found at: http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy. , https://business.safety.google/privacy/.

Usage-based online advertising

Facebook Custom Audiences

Furthermore, the website uses the ‘Website Custom Audiences’ function via the so-called ‘Facebook pixel’ from Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter referred to as ‘Facebook’). This allows users of the website to be shown interest-based advertisements (‘Facebook Ads’) when visiting the social network Facebook or other websites that also use this process. Our interest in this is to show you advertisements that are of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding page of our website or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying features.

The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR. In this case, we do not store any personal data about you. We have no knowledge of the storage period at Facebook and have no influence over it.

Logged-in users can deactivate the ‘Facebook Custom Audiences’ function at https://www.facebook.com/settings/?tab=ads#_. You can prevent the ‘Facebook Custom Audiences’ function in various ways and thus exercise your right to object:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/ choices, whereby this setting will be deleted if you delete your cookies. Further information on processing by Facebook can be found at https://www.facebook.com/about/privacy.

For the use of Facebook Analytics, we use the so-called ‘tracking pixel’ from Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin, Ireland).

Facebook Analytics

For the use of Facebook Analytics, we use the so-called ‘tracking pixel’ from Facebook Inc. (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: ‘Facebook’) to track your user behaviour. The information obtained by the tracking pixel cookie is used by us for statistical purposes only, is transmitted to us anonymously by Facebook and does not provide any information about the identity of the user. However, it is linked to your Facebook account by Facebook in accordance with its data protection guidelines account, stored and used for Facebook's own advertising purposes in accordance with Facebook's data use policy, whereby your data may also be transferred to Facebook's partners. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying features.

Your data is processed here on the basis of Art. 6 (1) (f) GDPR. By using Facebook Analytics, we pursue the interest of being able to better evaluate our website and improve our range of services. In this case, we do not store any personal data about you. We have no knowledge of the storage period at Facebook and have no influence on it.

Logged-in users can deactivate the ‘Facebook Analytics’ function at https://www.facebook.com/settings/?tab=ads#_ to exercise their right to object. You can prevent the ‘Facebook Analytics’ function in various ways and thus exercise your right to object:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies.

For more information on Facebook's privacy policy, please refer to the relevant privacy policy at https://de-de.facebook.com/about/privacy/.

Google AdWords Conversion

We use Google's Google AdWords service to draw attention to our attractive offers on external websites with the help of advertising material (known as Google AdWords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertising materials are delivered by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of ads or clicks by users, to be measured. If you access our website via a Google advertisement, Google AdWords will store a cookie on your computer. These cookies usually expire after 30 days and are not intended to identify you personally. The following analysis values are usually stored with this cookie: the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) are usually stored with this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. We ourselves do not process any personal data in the aforementioned advertising measures. We only receive statistical evaluations provided by Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.

You can prevent participation in this tracking process in various ways:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies;
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies;
• by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Google Remarketing

In addition to AdWords Conversion, we use Google's Google Remarketing application. This is a process we use to target you again. This application allows us to display our advertisements to you when you continue to use the internet after visiting our website. This is done using cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. This allows Google to detect your previous visit to our website. According to Google, the data collected in the context of remarketing is not merged with your personal data that may be processed by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The legal basis for processing is Art. 6 (1) (f) GDPR. We have no knowledge of the storage period at Google and have no influence over it.

You can prevent participation in this tracking process in various ways and thus exercise your right to object:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain ‘www.googleadservices.com’, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies;
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/ choices, whereby this setting will be deleted when you delete your cookies;
• by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin.

Criteo

The website uses the online advertising service Criteo, whose registered office is at Criteo SA, 32 Rue Blanche, 75009 Paris. We use this service to show you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners.

When you visit the website, Criteo receives information that you have accessed our website. Criteo uses a web beacon to place a cookie on your computer. The data mentioned in the ‘Access data’ section is transmitted. We have no influence on the data collected, nor are we aware of the full scope of data processing and the storage period. Your data is also transferred to the USA and processed there, whereby Criteo claims to comply with the data protection requirements for third-country transfers. The legal basis for the processing of your data is Art. 6(1)(f) GDPR. 1 lit. f) GDPR. We have no knowledge of the storage period at Criteo and have no influence over it. Further information on the purpose and scope of the processing, as well as further information on your rights in this regard and settings options for protecting your privacy, can be found at: https://www.criteo.com/de/privacy/.

You can object to the processing of your data by Criteo cookies. If you no longer wish to receive usage-based advertising and want to prevent further collection of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: https://www.criteo.com/de/privacy/. Alternatively, you can deactivate interest-based ads from providers who are part of the “Youronlinechoices” self-regulation campaign by clicking on the link http://www.youronlinechoices.com/uk/your-ad-choices, whereby this setting will be deleted if you delete your cookies.

Adroll

The website uses the online advertising service Adroll, headquartered at Adroll Advertising Ltd., Level 6, 1 Burlington Plaza, Burlington Road, Dublin 4, Ireland. We use this service to show you advertisements that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. This enables us to target advertising to those internet users who have already shown an interest in our services and products.

When you visit the website, Adroll receives information that you have accessed our website. Adroll uses a web beacon to place a cookie on your computer. The data mentioned in the ‘Access data’ section is transmitted. We have no influence on the data collected, nor are we aware of the full extent of data processing and the storage period. Your data is also transferred to the USA and processed there, where Adroll claims to comply with data protection requirements for third-country transfers. The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. We have no knowledge of the storage period at Adroll and have no influence over it. Further information on the purpose and scope of the processing, as well as further information on your rights in this regard and settings options for protecting your privacy, can be found at: https://www.adrollgroup.com/privacy.

You can object to the processing of your data by Adroll cookies. If you no longer wish to receive usage-based advertising and want to prevent further collection of your usage behaviour, you can exercise your right to object by clicking on the opt-out button at the following link: https://www.adrollgroup.com/privacy. Alternatively, you can deactivate interest-based ads from providers who are part of the ‘Youronlinechoices’ self-regulation campaign via the link

Axel Springer Teaser Ad

Our websites integrate tracking by Ad Up, a technology and service provider of Axel Springer Teaser Ad GmbH (Axel-Springer-Straße 65, 10969 Berlin). By collecting anonymised and/or pseudonymous data, Ad Up can then display interest-based advertising on websites for a certain period of time.

Ad Up uses cookies to offer advertisers conversion tracking, which determines the effectiveness of their ads and keywords. For more information on data protection at Axel Springer Teaser Ad GmbH, please visit: https://www.adup-tech.com/datenschutz/.

RTB House

Urlaubsguru GmbH processes certain data about users' online activities on this website in order to carry out personalised advertising campaigns. This data may include: online identifiers (e.g. cookie ID / mobile advertising ID), information about specific pages visited, products viewed or added to the shopping cart along with timestamps and purchases, as well as technical device and search engine details. Urlaubsguru GmbH engages RTB House GmbH, an advertising technology company, as a third-party subcontractor to conduct advertising campaigns and display personalised ads to users based on this data. Insofar as this data constitutes ‘personal data’ within the meaning of the GDPR, Urlaubsguru GmbH acts as the controller and RTB House GmbH as the processor. For more information about RTB House retargeting technology, please visit: https://www.rtbhouse.com/privacy-center/.

LinkedIn Ads

Our online offering incorporates functions and content from the LinkedIn service, provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043 (hereinafter ‘LinkedIn’).

This allows users of the website to be shown interest-based advertisements (‘LinkedIn Ads’) when visiting the LinkedIn social network or other websites that also use this process. Our aim is to show you advertisements that are of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection to the LinkedIn server. We have no influence on the scope and further processing of the data collected by LinkedIn through the use of this tool and therefore inform you according to our state of knowledge: By integrating LinkedIn Ads, LinkedIn receives information that you have accessed the corresponding page of our website or clicked on one of our advertisements. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying characteristics. LinkedIn has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thus offers a guarantee that it will comply with European data protection law. The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR. We have no knowledge of the storage period at LinkedIn and have no influence over it. Further information on data protection at LinkedIn can be found at:  https://www.linkedin.com/legal/privacy-policy.

You can object to the processing in various ways:

• by clicking on an opt-out link at: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements, or
• by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies.

Reddit

For the purpose of designing our pages in line with demand and continuously optimising them, as well as for their economic operation, we use Reddit Ads and Reddit Conversion Tracking (pixel), a marketing service provided by Reddit, Inc., 548 Market St. 16093, San Francisco, California 94104, and also use the ‘visitor action pixel’ (Reddit Conversion Tracking) of the Reddit platform within our website. We use Reddit Conversion Tracking for marketing and optimisation purposes, in particular to analyse the use of our website and to improve individual functions and offers as well as the user experience. By statistically evaluating user behaviour, we aim to improve our offering and make it more interesting for users. The legal basis for this is our legitimate interest in the processing of the above data by the third-party provider in accordance with Art. 6 (1) (f) GDPR. You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in your web browser settings. You can also prevent Reddit from collecting the aforementioned information by changing the relevant settings on the following Reddit website: https:/ /www.reddit.com/personalization/ Further information on the use of cookies by Reddit Ads can be found at https://www.redditinc.com/policies/cookies

Bing Ads

We use the conversion and tracking tool Bing Ads from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, ‘Microsoft’) on our website.

Microsoft stores a cookie on the user's computer to enable analysis of the use of our online offering. This requires that the user has accessed our website via a Microsoft Bing Ads advertisement. This allows Microsoft and us to recognise that someone has clicked on an advertisement, been redirected to our online offering and reached a predetermined landing page. We only learn the total number of users who clicked on a Bing ad and were then redirected to the landing page (conversions). No IP addresses are stored.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Microsoft server. We have no influence on the scope and further processing of the data generated by the use of Bing Ads. Microsoft has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thus offers a guarantee of compliance with European data protection law.

The legal basis for the processing of your data is Art. 6(1)( 1 lit. f) GDPR. We have no knowledge of the storage period at Microsoft and have no influence over it. Further information on data protection at Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement.

You can object to the processing in various ways:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements, or
• by deactivating interest-based advertising from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies.

AWIN (formerly Digital Window)

This website uses tracking functions from the affiliate network AWIN AG, Eichhornstraße 3, 10785 Berlin, formerly Digital Window, hereinafter referred to as ‘AWIN’. AWIN uses cookies and collects and stores usage data in pseudonymous profiles. Our aim is to show you advertising that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners.

When you visit the website, AWIN receives information that you have accessed our website. To do this, AWIN uses a web beacon to place a cookie on your computer. The data mentioned in the ‘Access data’ section is transmitted. We have no influence on the data collected, nor are we aware of the full extent of data processing and the storage period. Your data is also transferred to the USA and processed there. The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR. We have no knowledge of the storage period at AWIN and have no influence over it.

You can object to the processing of your data by AWIN cookies. You can deactivate tracking by our affiliated advertising and affiliate networks by setting an opt-out cookie at the following links: https://www.awin.com/de/rechtliches/cookieoptout. Alternatively, you can deactivate or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Social network plug-ins

Plug-ins from social networks are integrated into our website. These are provided by the following providers:

• Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework; hereinafter: ‘Facebook’)
• Google (see the definitions, https://www.google.com/policies/privacy/partners/? hl=en Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework)
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View CA 94043 (http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
• Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; https://policy.pinterest.com/de/privacy-policy.
• WhatsApp (provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, privacy policy at: https://www.whatsapp.com/legal/)

The plugins are identified on our website by the above-mentioned lettering or small stylised symbols.

We offer you the option of communicating directly with the plugin provider via the button. Only when you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned in the ‘Access data’ section will be transmitted.

In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and processed there (in the case of US providers, in the USA). Since the plug-in provider collects data via cookies in particular, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.

We have no influence on the data collected and processing operations, nor are we aware of the full extent of data processing, the purposes of processing or the storage periods. We also have no information about the deletion of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and processes this data for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation is carried out in particular (even for users who are not logged in) to display advertising in line with requirements and to inform other users of the social network about your activities on our website.

The legal basis for the use of plug-ins is Art. 6 para. 1 sentence 1 lit. f) GDPR. The plug-ins offer you the opportunity to interact with social networks and other users, enabling us to improve our offering and make it more interesting for you as a user.

You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. You can also prevent the creation of user profiles in various ways and thus exercise your right to object:

• by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements;
• by deactivating interest-based advertising from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, this setting will be deleted when you delete your cookies.

The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts.

We recommend that you log out regularly after using a social network, especially before activating the button, as this will prevent your profile from being assigned to the plug-in provider.

Copyright © by Spirit Legal LLP