top of page

DATA PROTECTION

data protection

 

The security of your data is important for us. Therefore, we would like to inform you below which data we use for which purposes. The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

 

AlbThermen Betriebsgesellschaft mbH
Bei den Thermen 2
72574 Bad Urach

Tel: 07125/94 36 0
Fax: 07125/94 36 30
Email: info@albthermen.de

 

In addition, AlbThermen Betriebsgesellschaft mbH has appointed an external data protection officer.
You can reach him at:
datenschutz@albthermen.de

 

With this data protection declaration, users receive information about the type, scope and purpose of the collection and use of their data by the responsible provider.

 

Collection and storage of personal data as well as the type and purpose of their use

When you visit our website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer,

  • Date and time of access,

  • Name and URL of the file called up,

  • Website from which access is made (referrer URL),

  • Browser used and, if applicable, the operating system of your computer and the name of your access provider.


The data mentioned are processed by us for the following purposes:

  • Ensuring a smooth connection to the website,

  • Ensuring comfortable use of our website,

  • Evaluation of system security and stability as well as

  • for further administrative purposes.


The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest results from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about you personally.

 

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https: //" address line of your browser and the lock symbol in the browser line.

 

Data transfer when concluding a contract for the purchase and dispatch of goods

Personal data will only be transmitted to third parties if there is a need to process the contract. Third parties can be payment service providers or logistics companies, for example. A further transmission of the data does not take place or only if you have expressly consented to this.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures

 

Registration on this website

You can register on our website to use certain functions. The transmitted data are used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be given in full. Otherwise we will refuse the registration.

In the event of important changes, e.g. for technical reasons, we will inform you by email. The e-mail will be sent to the address that was given during registration.

The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal email notification is sufficient for the revocation. The legality of the data processing that has already taken place remains unaffected by the revocation.

We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

 

contact form

Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal email notification is sufficient for the revocation. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store data. Mandatory legal provisions - in particular retention periods - remain unaffected.

 

Newsletter data

We need an email address from you to send our newsletter. A verification of the given email address is necessary and the receipt of the newsletter must be consented to. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided when registering for the newsletter are processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal notification by email is sufficient for the revocation or you can unsubscribe using the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted if you cancel. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

 

CleverReach

We use CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. With this service we can organize and analyze the sending of newsletters. The data you enter to receive the newsletter, such as your email address, will be stored on CleverReach's servers. Server locations are Germany and Ireland.

Sending newsletters with CleverReach allows us to analyze the behavior of the newsletter recipient. The analysis shows, among other things, how many recipients have opened their newsletter and how often links in the newsletter were clicked. CleverReach supports conversion tracking in order to analyze whether a previously defined action, such as a product purchase, has taken place after clicking on a link. Details on data analysis by CleverReach can be found at: https://www.cleverreach.com/de/funktion/reporting-und-tracking/ .

The data processing takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your already given consent at any time. An informal notification by email is sufficient for the revocation or you can unsubscribe using the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

If you do not want an analysis by CleverReach, you have to unsubscribe from the newsletter. To unsubscribe, an informal e-mail to us is sufficient or you can unsubscribe using the "Unsubscribe" link in the newsletter.

Data entered to set up the subscription will be deleted from our servers and the CleverReach servers if you unsubscribe. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

You can find details on the data protection provisions of CleverReach at: https://www.cleverreach.com/de/datenschutz/ .

Order processing

In order to fully comply with the statutory data protection requirements, we have concluded an order processing contract with CleverReach.

 

Cookies

Our website uses cookies. These are small text files that your web browser saves on your device. Cookies help us to make our offer more user-friendly, more effective and safer.

Some cookies are "session cookies." Such cookies are automatically deleted at the end of your browser session. However, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies can restrict the functionality of our website.

The setting of cookies, which are necessary to carry out electronic communication processes or to provide certain functions you wish to use (e.g. shopping cart), is based on Art. 6 Para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these will be treated separately in this data protection declaration.

 

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser saves on your device and that enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

Google Analytics cookies are set on the basis of Art. 6 Paragraph 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other data from Google. Browser plugin

The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data regarding your website usage including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to our website: Deactivate Google Analytics.

You can find details on how user data is handled by Google Analytics in the privacy policy of

Google: https://support.google.com/analytics/answer/6004245?hl=de .

 

Order processing

In order to fully comply with the statutory data protection requirements, we have concluded an order processing contract with Google.

Demographic characteristics in Google Analytics

Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".

 

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment data you have entered will be transmitted to PayPal.

Your data is transmitted to PayPal on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.

 

Instant bank transfer

Our website enables payment via "Sofortüberweisung." The payment service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich.

With the help of the "Sofortüberweisung" procedure, we receive a real-time payment confirmation from Sofort GmbH and can immediately begin to meet our obligations.

When paying by "immediate transfer", your PIN and TAN are transmitted to Sofort GmbH. The payment provider will then log into your online banking account, automatically check your account balance and make the transfer. An immediate confirmation of the transaction follows. Your sales, the credit line of your overdraft facility and the existence of other accounts and their stocks are also automatically checked after logging in.

In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number (s), email address, IP address and any other data required for payment processing. This data transfer is necessary in order to establish your identity beyond any doubt and to prevent attempted fraud.

The transfer of your data to Sofort GmbH takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.

You can find details on payment with immediate transfer at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/ .

 

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to check whether data is entered on our website (e.g. in a contact form) by a person or by an automated program. For this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, length of stay of the website visitor on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyzes run in the background and website visitors are not informed that an analysis is taking place.

The data processing takes place on the basis of Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM.

For more information on Google reCAPTCHA and Google's privacy policy, see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android. html .

 

Affected Rights

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details

  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;

  • In accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the correctness of the data, if the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert or exercise it or if you need to defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;

  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;

  • to revoke your consent given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent in the future

  • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work.

 

Right to object

If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to make use of your right of revocation or objection, an email to: info@albthermen.de is sufficient

 

Sections from: Data protection configurator from mein-datenschutzbeauftragter.de

AlbThermen on Facebook AlbThermen Shop Travelcircus wellnessstars service quality

bottom of page