DATA PROTECTION
General
For us, compliance with data protection laws is not only a legal obligation, but also an important factor in trust. With the following data protection regulations we would like to inform you transparently about the type, scope and purpose of the personal data collected and processed from you within this website as well as your rights.
Responsibility for data processing
Exclusive carriage rides, Britta Alpers, Dorfstraße 30a, 21272 Egestorf, phone 0160 41 525 48 (hereinafter: "We") are the operator of the website www.exclusive-kutschfahrten.de Responsible according to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR). If you have any questions, please contactinfo@exclusive-kutschfahrten.deturn.
Data protection officer
According to Art. 37 GDPR in conjunction with Section 38 BDSG, we are not obliged to appoint a data protection officer. If you have any questions about data protection and how to assert your rights as listed below, you can of course contact us at any time using the contact details given above.
Affected Rights
Your rights as a data subject
As a data subject, you have the following rights towards us with regard to your personal data. They have:
- A Right to information Among other things, about the categories of the processed data, the processing purposes, the storage period and any recipients, in accordance with Art. 15 GDPR and §34 BDSG.
- A Right to rectification or deletion of incorrect or incomplete data, in accordance with Art. 16 and 17 GDPR and Section 35 BDSG.
- Under the conditions of Art. 18 GDPR or Section 35 Paragraph 1 Sentence 2 BDSG Right to restriction of processing .
- A Right to object against processing in accordance with Art. 21 Paragraph 1 GDPR, insofar as the data processing took place on the basis of a legitimate interest
- A Right to withdraw a given consent with effect for the future in accordance with Art. 7 Para. 3 GDPR.
- A Right to data portability in a common format according to Art. 20 GDPR.
- According to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing that has legal effect on you or significantly affects you in a similar manner. This also includes profiling within the meaning of Art. 4 No. 4 GDPR.
- You also have the right, in accordance with Art. 77 GDPR, to contact a Data protection supervisory authority to complain about the processing of your personal data by us, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation.
Procedure
If you assert your rights under the GDPR and the BDSG against us, we will process the data you have transmitted to us in order to meet your claim. We then save the data you have transmitted to us and the data we have transmitted to you in return for the purpose of documentation until the statutory offense limitation period (3 years) has expired. The legal basis for the storage of the data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our obligation to comply with your request and the need to be able to relieve us of any possible fine proceedings by proving that we have properly complied with your request.
You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. For this purpose, please use the contact details given in the legal notice. However, we would like to point out that the processing of your data to prove compliance with the rights of the data subject is mandatory within the meaning of Art. 21 Para. 1 GDPR, as other means of proof do not exist or are not equally suitable.
Data protection measures
We use technical and organizational measures to secure our website and other systems - and therefore your data - against loss, destruction, access, modification or distribution by unauthorized persons. In particular, your personal data is encrypted and transmitted through the Internet. We use the TLS (Transport Layer Security) coding system.
However, the transmission of information over the Internet is never completely secure, which is why we cannot guarantee the security of the data transmitted by our website 100%.
Data processing modalities
Sources and categories of personal data
We process your personal data insofar as they are necessary for the establishment, content or modification of a contractual relationship between us and you (inventory data). Inventory data can in particular be: name, salutation, contact details (postal address, telephone, e-mail address), date of birth, etc.
We also process your usage data. Usage data are data that arise from your behavior when using our website and our services, in particular your IP address, the beginning and end of your visit to our website and information about what content you have accessed on our website.
We collect the data mentioned either directly from you (e.g. by visiting the website) or, insofar as this is permitted under data protection laws, from third parties or from publicly accessible sources (e.g. trade and association registers, press, media, internet).
Data transfer to third countries outside the EU
All information that we receive from you or about you is generally processed on servers within the European Union. Your data will only be transmitted to or processed in third countries without your express consent if this is provided for or permitted by law and an appropriate level of data protection is ensured in the third country.
Transfer of data, order processing
We never pass on your personal data to third parties without authorization. In particular, we can pass on your data to third parties if you have consented to the data being passed on, if the passing on is necessary to fulfill our legal obligations or if we are entitled or obliged to pass on data due to legal provisions or official or judicial orders. In particular, this may involve the provision of information for purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
We may also transfer your data to external service providers who process data on our behalf and according to our instructions (contract processors) in order to simplify or relieve our own data processing. Each processor is bound by a contract in accordance with Art. 28 GDPR. This means in particular that the processor has to offer sufficient guarantees that suitable technical and organizational measures are carried out by him in such a way that the processing takes place in accordance with the requirements of the GDPR and the protection of your rights as the data subject is guaranteed. Despite commissioning contract processors, we remain the responsible body for the processing of your personal data in terms of data protection laws.
Purpose of data processing
In principle, we only use the data for the purpose for which the data was collected from you. We can process the data for another purpose if this other purpose is not incompatible with the original purpose (Art. 5 Para. 1 lit. c) GDPR).
Storage period
Unless otherwise specified in detail, we only store data collected from you for as long as is necessary for the respective purpose, unless there are statutory retention requirements that conflict with the deletion, e.g. from commercial law or tax law.
Individual processing activities
In the following, we would like to show you as transparently as possible which data we process from you, on what occasion, on what basis and for what purpose.
Server log files
Every time a website is called up and every time data is retrieved from a server, general information is automatically transmitted to the server providing it. This data transfer takes place automatically and is a fundamental part of communication between devices on the Internet.
The data transmitted by default include the following information: your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which your access took place (so-called referer), date and time of the Request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this request.
This information is logged by the server, stored in a table and temporarily stored there (so-called server log files). By analyzing these log files, we can identify errors on the website and then eliminate them, determine the load on the website at certain times and, based on this, make adjustments or improvements as well as guarantee the security of the server by being able to understand from which IP address attacks were executed on our server.
Your IP address will only be stored for the time you are using the website and then immediately deleted or partially made unrecognizable by shortening it. The remaining data is stored for a limited period of time (usually 7 days).
The legal basis for the use of the server log files is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from the need for the operation and maintenance of our website, as we have explained above. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. For this purpose, please use the contact details given in the legal notice. However, we would like to point out in advance that the processing of your data in server log files is mandatory within the meaning of Art. 21 Paragraph 1 GDPR, as otherwise the website cannot be operated at all.
contact
Our website offers the opportunity to contact us directly. By contacting us, you consent to the processing and storage of your transmitted data (in particular your email address) in order to process your request. You can object to this processing at any time with future effect. Please use our contact details in the legal notice. Please note, however, that we will then no longer process your request.
We process the data you transmit to us only until the respective purpose of your contact has been achieved, unless there are statutory retention periods to the contrary. If the purpose of your contact is to assert the rights of the data subject, what is said in the section “Your rights as a data subject” applies.
The legal basis for the use of the data transmitted to us by you when you contact us is Art. 6 Para. 1 S. 1 Letter a) GDPR (consent of the person concerned). You can revoke your consent at any time with effect for the future. For this purpose, please use the contact details given in the legal notice.
Cookies
We use so-called "cookies" to improve user-friendliness on our website.
What are cookies
Put very simply, a cookie is a small text file that stores data about websites visited. Cookies can be used in many ways. For example, you can save a type of "user profile", ie things like your preferred language and other page settings that are required by our website in order to be able to offer you certain services. The cookie file is stored on your device and can also help to recognize you when you visit our website again. Under certain circumstances, we can also use the cookies to obtain information about your preferred activities on our website and thus tailor our website to your individual interests or even increase the speed of navigation on our website.
How you can avoid cookies
You can manually delete cookies at any time in the security settings of your browser. You can also prevent the storage of cookies from the outset by setting your browser accordingly. Please note, however, that you may then not be able to use all the functions of our website to their full extent or that errors may occur in the display and use of the website.
Third party cookies
It is possible that third-party providers, with whom we design and operate our site, in particular through so-called plugins (see below in the section “Third-party services”), independently save their own cookies on your device. If you only want to accept our own cookies, but not cookies from these third parties, you can prevent these cookies from being saved by setting your browser to “block third-party cookies”.
Which cookies are used
In detail, our website uses the following cookies:
§Session cookies (in German: session cookies): These contain an identification number with which various requests from your browser can be assigned to a session. This allows your computer to be recognized when you return to our website. The session cookies are automatically deleted when you close the browser. We use this type of cookie to provide elementary functions of this website, such as protection against spam sending via request forms. We also use session cookies to recognize how many sub-pages of the homepage you call up and how long you stay on the pages. An assignment to you as a person or the creation of a usage profile over a longer period than a browser session is not possible. If you deactivate the collection of your data for analysis purposes (as described in the section "Analysis tools"), we will save this in a cookie so that this service will continue to be deactivated automatically the next time you visit the homepage. This cookie will be automatically deleted on December 31, 2099. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to be able to offer you a user-friendly website, as well as from our need for an anonymous evaluation of the usage behavior on our website for the user-oriented improvement of the design of our online offer.
§Read confirmation of the initial information: Before presenting certain insurance-related information, we are legally obliged to inform you of our status as an agent. This is done in the form of our initial information, the download of which you must confirm by ticking the box. We save in a cookie that the confirmation has been made by you and that you do not have to download the initial information again.
§Cookie settings: In order to inform you transparently about the use of cookies by us, a notice banner is displayed at the bottom of the browser window. Here you have the option of determining yourself which of the non-essential cookies we are allowed to use when you visit the website. Your settings for this will be saved in several cookies for future visits to this website. These cookies are automatically deleted after a maximum of one year.
§Sweepstakes, betting games, etc: It is possible that a module for participating in a sweepstakes, betting game, etc. is integrated on one of the sub-pages of this homepage. If you register to participate, we save an identification number in a cookie so that you are automatically logged in again the next time you visit this module and do not have to re-enter your data. This cookie is automatically deleted after one year.
The legal basis for the use of cookies, which are absolutely necessary for the website to function (e.g. shopping cart cookie, session cookie), is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need to be able to offer you a functioning website. Cookies are necessary for this because they are an integral part of current Internet technology and many functions of current websites would not be available without cookies. We therefore need cookies in order to be able to make the website available to you on your request.
You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. For this purpose, please use the contact details given in the legal notice.
However, we would like to point out that the processing of your data in certain cookies is mandatory within the meaning of Art. 21 Paragraph 1 GDPR, as otherwise the website cannot be operated at all and we do not technically have the option of setting cookies to certain to prevent individual end devices. However, you may be able to do this yourself in your browser. For more information on this, please have a look at the instructions for your browser.
The legal basis for the use of cookies, which are not absolutely necessary for the website to function, is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR (consent of the person concerned). When you visit the website for the first time, we will ask you for your consent to the use of unnecessary cookies via a text that is displayed. You can revoke your consent at any time with future effect by deleting all cookies in your browser. How this works in your browser can be found in the instructions for the browser.
Third party services
To simplify our data processing and to expand the functionality of our website, we use services / resources from third parties, such as plugins, external content, software or other external service providers (services). Personal data may also be transmitted to the service provider. In order to protect your data, we have, if necessary, contractually obliged the service providers in accordance with Art. 28 GDPR to only process your data according to our instructions.
We expressly point out that we are only regularly responsible for data collection and transmission by the service within the meaning of the GDPR, but not for any subsequent processing by the respective service provider.
In detail, we use the following services:
Website builder and hosting service
Our website is based on a so-called website construction kit from 1 & 1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. We have concluded a so-called order processing contract with the provider to ensure that they only process your data according to our instructions. You can find more information on handling user data in the data protection declaration of 1 & 1 IONOS SE:https://www.ionos.de/terms-gtc/terms-privacy
The website builder is a service that enables us to offer a website without in-depth knowledge of website programming by simplifying the creation and maintenance of the website via a cloud-based user interface. The term "cloud-based" means that the maintenance interface is provided to us by 1 & 1 IONOS SE on their servers. When using this application, 1 & 1 IONOS SE generates personal and non-personal data, which it can process on our behalf in accordance with our and your data protection regulations. At the same time, the provider provides the infrastructure that is required to operate the website.
The legal basis for the use of cloud-based website construction kits including hosting services and the associated processing of your data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from our need for a technically flawless presentation of our website without us needing in-depth knowledge of programming websites and maintaining IT systems. You can object to the processing of your data on the basis of our legitimate interest at any time under the conditions of Art. 21 GDPR. For this purpose, please use the contact details given in the legal notice. However, we would like to point out that the processing of your data by our website provider is mandatory within the meaning of Art. 21 Para. 1 GDPR, as otherwise the website cannot be operated at all and we technically do not have the ability to link individual users to a Redirect a page that is exclusively on its own server.
Analysis tools
Social media
These channels are used for the following purposes:
- Providing information about our company and our products
- Statistical evaluations for business analysis and further development of services and products, as well as for improving business processes
- Communication with customers and prospects.
Facebook:Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
We are jointly responsible with Facebook for the processing of Insights data on the Facebook fan page. The corresponding agreement according to Art. 26 GDPR can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum
. For more information on Page Insights, see
https://www.facebook.com/legal/terms/information_about_page_insights_data
.
The general use of Facebook is at your own risk. You can find Facebook's data protection information directly on our Facebook fan page.
You can edit and object to your requests for personalized advertising by Facebook at any time in your Facebook settings.
YouTube: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
You can find further information on data protection and the personal data collected during the integration with Google / YouTube in the following data protection declaration: https://www.google.com/policies/privacy/
An opt-out is also possible:https://adssettings.google.com/authenticated
The legal basis for activating these videos is your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which is related to your consent to the use of cookies (Cookie page).
Provider of the YouTube platform
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google / YouTube can be found here:
https://www.google.com/policies/privacy/
. A general advertising opt-out is possible here:
https://adssettings.google.com/authenticated
.