Privacy policy

  1. Data protection, controller and data protection officer

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, such as name, address, e-mail addresses, telephone number, user behaviour.

The controller responsible for the processing of your personal data through this website is

Die Pension Auw
Owner: Nicola Hieber
Mühlenweg 8, D-54597 Auw bei Prüm
Ph.: +49 (0) 175 45 22 752
E-Mail: info@die-pension-auw.de

You can reach our data protection officer at the e-mail address datenschutz@die-pension-auw.de or at our postal address with the addition ‘Attn: Data Protection Officer’.

  1. Note on data transfer to the USA

Our website includes tools and plugins from companies based in the USA. If these are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, analyse and permanently store your data on US servers for surveillance purposes. We have no influence on this processing.

  1. Personal data

(a) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Article 6 (1) sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified. The legal basis is Article 6(1)(f) GDPR.

(b) In addition, personal data is only collected by us if and to the extent that you provide this data yourself, e.g. when contacting us or submitting an application. We treat this data confidentially and only use it for the original reason and purpose of the transmission, regularly for processing and handling your enquiry. In principle, the data will not be transmitted to third parties unless this is required or permitted by law, you have given us your consent or there is an official order to do so. If your enquiry is addressed to one of our group companies, we will of course forward your enquiry to that company. If you contact us by e-mail, your e-mail will be stored in our mail system. We may store your enquiry and the associated data in our CRM system. The e-mails themselves are not stored in content-encrypted form. Our contact form is transport-encrypted via SSL/TLS, which you can recognise by the ‘https’ in front of the URL. Our mail server also supports the common transport encryption protocols. The legal basis for this is Article 6(1)(b) GDPR.

  1. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device. Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the USA and stored there.

This analysis tool is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Order processing

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the ‘demographic characteristics’ function of Google Analytics in order to be able to display suitable adverts to website visitors within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section ‘Objection to data collection’.

  1. Hosting with Ionos

We host our website with Ionos. The provider is Ionos SE by 1&1, part of the listed company United Internet AG, with its registered office at Elgendorfer Str. 57, 56410 Montabaur (hereinafter: Ionos). When you visit our website, your personal data is processed on the Ionos servers. Personal data may also be transmitted to the parent company of Ionos. The data transfer is based on the EU standard contractual clauses. Details can be found here: https://www.ionos.de/terms-gtc/terms-privacy

  1. Social Media

The legal basis for this processing of your personal data is our legitimate interest in communicating with our interested parties and customers as well as analysing and further developing services and products and improving business processes (Article 6(1)(f) GDPR). Direct customer contact also takes place via our social media support, whereby the processing is based on our contractual relationship or pre-contractual measures with interested parties (Article 6(1)(b) GDPR).

Further information on the social media platforms:

Facebook und Instagram: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

We are jointly responsible with Facebook for the processing of Insights data on the Facebook fan page. The corresponding agreement in accordance with Article 26 GDPR can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum. More information on Page-Insights can be found at
https://www.facebook.com/legal/terms/information_about_page_insights_data.

The general use of Facebook is your own responsibility. You can find Facebook’s data protection information directly on our Facebook fan page.

You can edit and object to your wishes regarding personalised advertising by Facebook at any time in your Facebook settings.

YouTube: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Further information on data protection and the personal data collected by Google/YouTube during integration can be found in the following privacy policy: https://www.google.com/policies/privacy/

An opt-out is also possible: https://adssettings.google.com/authenticated

  1. Video content

Youtube and Vimeo

We embed videos on our website. The content of these videos is stored directly on the platforms and embedded on our site. If you call up such a video, the IP address, technical information such as browser, operating system and basic device information as well as the website you have visited will be communicated. We have also embedded the YouTube videos in privacy-friendly ‘extended data protection mode’.

Personal data is only transferred when you access a video. Only then is a server connection to YouTube and Vimeo established and a corresponding cookie set, which is used to save your settings. When you call up the videos, you leave our area and enter the external platforms of YouTube and Vimeo, which are beyond our sphere of influence.

You will be informed again before you access a video. If you have an account with the provider of the video service, they may be able to identify you. You can avoid this by logging out of your account before playing a video.

The legal basis for the activation of these videos is your consent in accordance with Article 6(1)(a) GDPR, which is related to your consent to the use of cookies.

Provider of the YouTube platform Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google/YouTube can be found here: https://www.google.com/policies/privacy/. A general advertising opt-out is possible here:
https://adssettings.google.com/authenticated.

Provider of the Vimeo platform Vimeo, LLC, 555 West 18th Street, New York, NY 10011, USA. Further information on data protection at Vimeo can be found here: https://livestream.com/legal/cookie-preferences.

  1. Your rights

(1) Right to information: You have the right to information at any time in accordance with Article 15 GDPR as to whether we process your personal data. If this is the case, this results in further information obligations on our part.

(2) Right to rectification: Furthermore, you have a right to rectification of the data in accordance with Article 16 GDPR, to erasure of the data in accordance with Article 17 GDPR and to restriction of the processing of the data in accordance with Article 18 GDPR, provided that this does not conflict with any other legal requirements.

(3) Right to erasure: Of course, you can withdraw your consent to the processing of data in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR at any time without giving reasons. This does not affect the lawfulness of the processing until the revocation.

(4) Right to restriction of processing: In the following cases, you can contact us regarding a restriction of processing in accordance with Article 18 GDPR:

  • You have disputed the accuracy of data and we should not continue to use it in the meantime until the final review
  • The processing is unlawful, but you do not want it to be erased, but would prefer the processing to be restricted
  • We no longer need the data and would erase it, but you still need it for the establishment, exercise or defence of legal claims
  • You have lodged an objection to the data processing, but this is still being examined.

In the event of a restriction, we ensure that the personal data cannot be further processed or changed by us. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

(5) Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and, where applicable, to transmit those data to a third party. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller in accordance with Article 20 GDPR.

(6) Right to object: In addition, you have the right to object to the processing of data in accordance with Article 21 GDPR, in particular in the case of processing on the basis of Article 6(1)(e) or (f) GDPR. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(7) Right to lodge a complaint: You also have the right to lodge a complaint with the supervisory authority responsible for you, which you can find here (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html). In our case, the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate (LfDI RLP), Postfach 30 40, 55020 Mainz, Germany, is the right point of contact.

Status: November 2021