Privacy policy

1. An overview of data protection

General information

The follow­ing infor­ma­tion will provide you with an easy to navi­gate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to person­ally iden­tify you. For detailed infor­ma­tion about the subject matter of data protec­tion, please consult our Data Protec­tion Decla­ra­tion, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the oper­a­tor of the website, whose contact infor­ma­tion is avail­able under section “Infor­ma­tion about the respon­si­ble party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our contact form.

Other data shall be recorded by our IT systems auto­mat­i­cally or after you consent to its record­ing during your website visit. This data comprises primar­ily tech­ni­cal infor­ma­tion (e.g., web browser, oper­at­ing system, or time the site was accessed). This infor­ma­tion is recorded auto­mat­i­cally when you access this website.

What are the purposes we use your data for?

A portion of the infor­ma­tion is gener­ated to guar­an­tee the error free provi­sion of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and purposes of your archived personal data at any time with­out having to pay a fee for such disclo­sures. You also have the right to demand that your data are recti­fied or erad­i­cated. If you have consented to data process­ing, you have the option to revoke this consent at any time, which shall affect all future data process­ing. More­over, you have the right to demand that the process­ing of your data be restricted under certain circum­stances. Further­more, you have the right to log a complaint with the compe­tent super­vis­ing agency.

Please do not hesi­tate to contact us at any time if you have ques­tions about this or any other data protec­tion related issues.

Analysis tools and tools provided by third parties

There is a possi­bil­ity that your brows­ing patterns will be statis­ti­cally analyzed when your visit this website. Such analy­ses are performed primar­ily with what we refer to as analy­sis programs.

For detailed infor­ma­tion about these analy­sis programs please consult our Data Protec­tion Decla­ra­tion below.

2. Hosting

We are host­ing the content of our website at the follow­ing provider:

webgo

The provider is the webgo GmbH, Heidenkamp­sweg 81, 20097, Hamburg, Germany (here­inafter referred to as “webgo”). When­ever you visit our website, webgo will record a vari­ety of logfiles, includ­ing your IP addresses.

For details, please refer to the Data Privacy Policy of webgo: https://www.webgo.de/datenschutz/.

We use webgo on the basis of Art. 6 (1)(f) GDPR. We have a legit­i­mate inter­est in making the depic­tion of our website as depend­able as possi­ble. If you have been asked for your respec­tive consent, process­ing shall occur exclu­sively on the basis of Art. 6 (1)(a) GDPR and § 25(1) TDDDG, if the consent comprises the archiv­ing of cook­ies or access to infor­ma­tion on the user’s device (e.g., device finger print­ing) as defined in the TDDDG. Such consent may be revoked at any time.

Data processing

We have concluded a data process­ing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guar­an­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

3. General information and mandatory information

Data protection

The oper­a­tors of this website and its pages take the protec­tion of your personal data very seri­ously. Hence, we handle your personal data as confi­den­tial infor­ma­tion and in compli­ance with the statu­tory data protec­tion regu­la­tions and this Data Protec­tion Declaration.

When­ever you use this website, a vari­ety of personal infor­ma­tion will be collected. Personal data comprises data that can be used to person­ally iden­tify you. This Data Protec­tion Decla­ra­tion explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the infor­ma­tion is collected.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail commu­ni­ca­tions) may be prone to secu­rity gaps. It is not possi­ble to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data process­ing controller on this website is:

Riad Selouane — Artl­o­gis Sarl
Svenja Keller
6 Derb Tizougarine
Bab Doukkala
40000 Marrakech
Maroc

Phone: +212 (0) 524 44 41 41
E‑mail: info@riad-selouane.net

The controller is the natural person or legal entity that single-hand­edly or jointly with others makes deci­sions as to the purposes of and resources for the process­ing of personal data (e.g., names, e‑mail addresses, etc.).

Storage duration

Unless a more specific stor­age period has been spec­i­fied in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justi­fied request for dele­tion or revoke your consent to data process­ing, your data will be deleted, unless we have other legally permis­si­ble reasons for stor­ing your personal data (e.g., tax or commer­cial law reten­tion peri­ods); in the latter case, the dele­tion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data process­ing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special cate­gories of data are processed accord­ing to Art. 9 (1) DSGVO. In the case of explicit consent to the trans­fer of personal data to third coun­tries, the data process­ing is also based on Art. 49 (1)(a) GDPR. If you have consented to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device finger­print­ing), the data process­ing is addi­tion­ally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfill­ment of a contract or for the imple­men­ta­tion of pre-contrac­tual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Further­more, if your data is required for the fulfill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Further­more, the data process­ing may be carried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rele­vant legal basis in each indi­vid­ual case is provided in the follow­ing para­graphs of this privacy policy.

Information on the data transfer to third-party countries that are not secure under data protection law and the transfer to US companies that are not DPF-certified

We use, among other tech­nolo­gies, tools from compa­nies located in third-party coun­tries that are not safe under data protec­tion law, as well as US tools whose providers are not certi­fied under the EU-US Data Privacy Frame­work (DPF). If these tools are enabled, your personal data may be trans­ferred to and processed in these coun­tries. We would like you to note that no level of data protec­tion compa­ra­ble to that in the EU can be guar­an­teed in third coun­tries that are inse­cure in terms of data protec­tion law.

We would like to point out that the US, as a secure third-party coun­try, gener­ally has a level of data protec­tion compa­ra­ble to that of the EU. Data trans­fer to the US is there­fore permit­ted if the recip­i­ent is certi­fied under the “EU-US Data Privacy Frame­work” (DPF) or has appro­pri­ate addi­tional assur­ances. Infor­ma­tion on trans­fers to third-party coun­tries, includ­ing the data recip­i­ents, can be found in this Privacy Policy.

Recipients of personal data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with vari­ous exter­nal parties. In some cases, this also requires the trans­fer of personal data to these exter­nal parties. We only disclose personal data to exter­nal parties if this is required as part of the fulfill­ment of a contract, if we are legally oblig­ated to do so (e.g., disclo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the disclo­sure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclo­sure of this data. When using proces­sors, we only disclose personal data of our customers on the basis of a valid contract on data process­ing. In the case of joint process­ing, a joint process­ing agree­ment is concluded.

Revocation of your consent to the processing of data

A wide range of data process­ing trans­ac­tions are possi­ble only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be with­out prej­u­dice to the lawful­ness of any data collec­tion that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of viola­tions of the GDPR, data subjects are enti­tled to log a complaint with a super­vi­sory agency, in partic­u­lar in the member state where they usually main­tain their domi­cile, place of work or at the place where the alleged viola­tion occurred. The right to log a complaint is in effect regard­less of any other admin­is­tra­tive or court proceed­ings avail­able as legal recourses.

Right to data portability

You have the right to have data that we process auto­mat­i­cally on the basis of your consent or in fulfill­ment of a contract handed over to you or to a third party in a common, machine-read­able format. If you should demand the direct trans­fer of the data to another controller, this will be done only if it is tech­ni­cally feasible.

Information about, rectification and eradication of data

Within the scope of the applic­a­ble statu­tory provi­sions, you have the right to demand infor­ma­tion about your archived personal data, their source and recip­i­ents as well as the purpose of the process­ing of your data at any time. You may also have a right to have your data recti­fied or erad­i­cated. If you have ques­tions about this subject matter or any other ques­tions about personal data, please do not hesi­tate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the impo­si­tion of restric­tions as far as the process­ing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restric­tion of process­ing applies in the follow­ing cases:

• In the event that you should dispute the correct­ness of your data archived by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the process­ing of your personal data.
• If the process­ing of your personal data was/is conducted in an unlaw­ful manner, you have the option to demand the restric­tion of the process­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your personal data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the process­ing of your personal data instead of its eradication.
• If you have raised an objec­tion pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inter­ests prevail, you have the right to demand a restric­tion of the process­ing of your personal data.

If you have restricted the process­ing of your personal data, these data – with the excep­tion of their archiv­ing – may be processed only subject to your consent or to claim, exer­cise or defend legal enti­tle­ments or to protect the rights of other natural persons or legal enti­ties or for impor­tant public inter­est reasons cited by the Euro­pean Union or a member state of the EU.

SSL and/or TLS encryption

For secu­rity reasons and to protect the trans­mis­sion of confi­den­tial content, such as purchase orders or inquiries you submit to us as the website oper­a­tor, this website uses either an SSL or a TLS encryp­tion program. You can recog­nize an encrypted connec­tion by check­ing whether the address line of the browser switches from “http://” to “https://” and also by the appear­ance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is acti­vated, data you trans­mit to us cannot be read by third parties.

Rejection of unsolicited e‑mails

We here­with object to the use of contact infor­ma­tion published in conjunc­tion with the manda­tory infor­ma­tion to be provided in our Site Notice to send us promo­tional and infor­ma­tion mate­r­ial that we have not expressly requested. The oper­a­tors of this website and its pages reserve the express right to take legal action in the event of the unso­licited send­ing of promo­tional infor­ma­tion, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our websites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any damage to your device. They are either stored temporar­ily for the dura­tion of a session (session cook­ies) or they are perma­nently archived on your device (perma­nent cook­ies). Session cook­ies are auto­mat­i­cally deleted once you termi­nate your visit. Perma­nent cook­ies remain archived on your device until you actively delete them, or they are auto­mat­i­cally erad­i­cated by your web browser.

Cook­ies can be issued by us (first-party cook­ies) or by third-party compa­nies (so-called third-party cook­ies). Third-party cook­ies enable the inte­gra­tion of certain services of third-party compa­nies into websites (e.g., cook­ies for handling payment services).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cally essen­tial since certain website func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the display of videos). Other cook­ies may be used to analyze user behav­ior or for promo­tional purposes.

Cook­ies, which are required for the perfor­mance of elec­tronic commu­ni­ca­tion trans­ac­tions, for the provi­sion of certain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sary for the opti­miza­tion (required cook­ies) of the website (e.g., cook­ies that provide measur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a differ­ent legal basis is cited. The oper­a­tor of the website has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cally error-free and opti­mized provi­sion of the operator’s services. If your consent to the stor­age of the cook­ies and simi­lar recog­ni­tion tech­nolo­gies has been requested, the process­ing occurs exclu­sively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be noti­fied any time cook­ies are placed and to permit the accep­tance of cook­ies only in specific cases. You may also exclude the accep­tance of cook­ies in certain cases or in general or acti­vate the delete-func­tion for the auto­matic erad­i­ca­tion of cook­ies when the browser closes. If cook­ies are deac­ti­vated, the func­tions of this website may be limited.

Which cook­ies and services are used on this website can be found in this privacy policy.

Consent with Borlabs Cookie

Our website uses the Borlabs consent tech­nol­ogy to obtain your consent to the stor­age of certain cook­ies in your browser or for the use of certain tech­nolo­gies and for their data privacy protec­tion compli­ant docu­men­ta­tion. The provider of this tech­nol­ogy is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (here­inafter referred to as Borlabs).

When­ever you visit our website, a Borlabs cookie will be stored in your browser, which archives any decla­ra­tions or revo­ca­tions of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to erad­i­cate them, delete the Borlabs cookie on your own or the purpose of stor­ing the data no longer exists. This shall be with­out prej­u­dice to any reten­tion oblig­a­tions mandated by law. To review the details of Borlabs’ data process­ing poli­cies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent tech­nol­ogy to obtain the decla­ra­tions of consent mandated by law for the use of cook­ies. The legal basis for the use of such cook­ies is Art. 6(1)© GDPR.

Contact form

If you submit inquiries to us via our contact form, the infor­ma­tion provided in the contact form as well as any contact infor­ma­tion provided therein will be stored by us in order to handle your inquiry and in the event that we have further ques­tions. We will not share this infor­ma­tion with­out your consent.

The process­ing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execu­tion of a contract or if it is neces­sary to carry out pre-contrac­tual measures. In all other cases the process­ing is based on our legit­i­mate inter­est in the effec­tive process­ing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The infor­ma­tion you have entered into the contact form shall remain with us until you ask us to erad­i­cate the data, revoke your consent to the archiv­ing of data or if the purpose for which the infor­ma­tion is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be with­out prej­u­dice to any manda­tory legal provi­sions, in partic­u­lar reten­tion periods.

Request by e‑mail, telephone, or fax

If you contact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing personal data (name, request) will be stored and processed by us for the purpose of process­ing your request. We do not pass these data on with­out your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfill­ment of a contract or is required for the perfor­mance of pre-contrac­tual measures. In all other cases, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive handling of inquiries submit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the stor­age or the purpose for the data stor­age lapses (e.g. after comple­tion of your request). Manda­tory statu­tory provi­sions — in partic­u­lar statu­tory reten­tion peri­ods — remain unaffected.

5. Social media

Social media elements with Shariff

We do use elements of social media networks on this website and its pages (e.g. Face­book, X, Insta­gram, Pinter­est, XING, LinkedIn, Tumblr).

As a rule, you will be able to recog­nize these social media elements because of the respec­tive social media logos that appear. To warrant the protec­tion of data on this website, we use these elements only in combi­na­tion with the so-called “Shar­iff” solu­tion. This appli­ca­tion prevents the social media elements that have been inte­grated into this website from trans­fer­ring personal data to the respec­tive provider as soon as you enter our website.

A direct connec­tion to the provider’s server shall not be estab­lished until you have acti­vated the respec­tive social media element by click­ing on the affil­i­ated button (which indi­cates your consent). As soon as you acti­vate the social media element, the respec­tive provider receives the infor­ma­tion that you have visited this website with your IP address. If you are simul­ta­ne­ously logged into your respec­tive social media account (e.g. Face­book), the respec­tive provider will be able to allo­cate your visit to this website to your user account.

The acti­va­tion of the plug-in consti­tutes a decla­ra­tion of consent as defined in Art. 6(1)(a) GDPR and und § 25 (1) TDDDG. You have the option to revoke this consent at any time, which shall affect all future transactions.

This service is used to obtain the consent to the use of certain tech­nolo­gies required by law. The legal basis for this is Art. 6(1)© GDPR.

Pinterest

We use elements of the social network Pinter­est on this website. The network is oper­ated by Pinter­est Europe Ltd., Palmer­ston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

If you access a site or page that contains such an element, your browser will estab­lish a direct connec­tion with Pinterest’s servers. During this process, the social media element trans­fers log data to Pinterest’s servers in the United States. The log data may possi­bly include your IP address, the address of the websites you visited, which also contain Pinter­est func­tions. The infor­ma­tion also includes the type and settings of your browser, the data and time of the inquiry, how you use Pinter­est and cookies.

The use of this service is based on your consent in accor­dance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.

For more infor­ma­tion concern­ing the purpose, scope and continue process­ing and use of the data by Pinter­est as well as your affil­i­ated rights and options to protect your private infor­ma­tion, please consult the data privacy infor­ma­tion of Pinter­est at: https://about.pinterest.com/en/privacy-policy.

6. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to inte­grate track­ing or statis­ti­cal tools and other tech­nolo­gies on our website. The Google Tag Manager itself does not create any user profiles, does not store cook­ies, and does not carry out any inde­pen­dent analy­ses. It only manages and runs the tools inte­grated via it. However, the Google Tag Manager does collect your IP address, which may also be trans­ferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website oper­a­tor has a legit­i­mate inter­est in the quick and uncom­pli­cated inte­gra­tion and admin­is­tra­tion of vari­ous tools on his website. If appro­pri­ate consent has been obtained, the process­ing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the consent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device finger­print­ing) within the mean­ing of the TDDDG. This consent can be revoked at any time.

The company is certi­fied in accor­dance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data process­ing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follow­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses func­tions of the web analy­sis service Google Analyt­ics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analyt­ics enables the website oper­a­tor to analyze the behav­ior patterns of website visi­tors. To that end, the website oper­a­tor receives a vari­ety of user data, such as pages accessed, time spent on the page, the utilized oper­at­ing system and the user’s origin. This data is assigned to the respec­tive end device of the user. An assign­ment to a user-ID does not take place.

Further­more, Google Analyt­ics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Analyt­ics uses vari­ous model­ing approaches to augment the collected data sets and uses machine learn­ing tech­nolo­gies in data analysis.

Google Analyt­ics uses tech­nolo­gies that make the recog­ni­tion of the user for the purpose of analyz­ing the user behav­ior patterns (e.g., cook­ies or device finger­print­ing). The website use infor­ma­tion recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certi­fied in accor­dance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data process­ing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follow­ing link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Analyt­ics IP anonymiza­tion is active. As a result, your IP address will be abbre­vi­ated by Google within the member states of the Euro­pean Union or in other states that have rati­fied the Conven­tion on the Euro­pean Economic Area prior to its trans­mis­sion to the United States. The full IP address will be trans­mit­ted to one of Google’s servers in the United States and abbre­vi­ated there only in excep­tional cases. On behalf of the oper­a­tor of this website, Google shall use this infor­ma­tion to analyze your use of this website to gener­ate reports on website activ­i­ties and to render other services to the oper­a­tor of this website that are related to the use of the website and the Inter­net. The IP address trans­mit­ted in conjunc­tion with Google Analyt­ics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the record­ing and process­ing of your data by Google by down­load­ing and installing the browser plugin avail­able under the follow­ing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the handling of user data by Google Analyt­ics, please consult Google’s Data Privacy Decla­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data process­ing agree­ment with Google and are imple­ment­ing the strin­gent provi­sions of the German data protec­tion agen­cies to the fullest when using Google Analytics.

VG Wort Zählpixel

We have imple­mented texts on our website, in which a so-called track­ing pixel (METIS track­ing pixel) is embed­ded. The provider is the Verw­er­tungs­ge­sellschaft WORT — VG WORT (asso­ci­a­tion with legal capac­ity by virtue of confer­ral), Untere Weiden­straße 5, 81543 Munich (here­inafter “VG Wort”).

The pixel counts the views of texts, forwards them anony­mously to the VG Wort, in order to deter­mine the distri­b­u­tions for the authors. The use of the VG Wort pixel is based on our legit­i­mate inter­est in receiv­ing remu­ner­a­tion for the texts published on our website for our authors or for ourselves (Art. 6(1)(f) GDPR). Conflict­ing inter­ests of website visi­tors are not appar­ent, as the data is trans­mit­ted to VG Wort in anonymized form.

7. Plug-ins and Tools

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connec­tion to Google’s servers will not be estab­lished in conjunc­tion with this application.

For more infor­ma­tion on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Decla­ra­tion under: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (here­inafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to deter­mine whether data entered on this website (e.g., infor­ma­tion entered into a contact form) is being provided by a human user or by an auto­mated program. To deter­mine this, reCAPTCHA analyzes the behav­ior of the website visi­tors based on a vari­ety of para­me­ters. This analy­sis is trig­gered auto­mat­i­cally as soon as the website visi­tor enters the site. For this analy­sis, reCAPTCHA eval­u­ates a vari­ety of data (e.g., IP address, time the website visi­tor spent on the site or cursor move­ments initi­ated by the user). The data tracked during such analy­ses are forwarded to Google.

reCAPTCHA analy­ses run entirely in the back­ground. Website visi­tors are not alerted that an analy­sis is underway.

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website oper­a­tor has a legit­i­mate inter­est in the protec­tion of the operator’s websites against abusive auto­mated spying and against SPAM. If appro­pri­ate consent has been obtained, the process­ing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the consent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device finger­print­ing) within the mean­ing of the TDDDG. This consent can be revoked at any time.

For more infor­ma­tion about Google reCAPTCHA please refer to the Google Data Privacy Decla­ra­tion and Terms Of Use under the follow­ing links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The company is certi­fied in accor­dance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data process­ing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follow­ing link: https://www.dataprivacyframework.gov/participant/5780.

8. Online marketing and partner programs

Affiliate Programs on this website

We partic­i­pate in affil­i­ate part­ner programs. In conjunc­tion with affil­i­ate part­ner programs, ads of busi­nesses (adver­tis­ers) are placed on websites of other enter­prises within the affil­i­ate part­ner network (publisher). If you click on one of these affil­i­ate ads, you will be trans­ferred to the promoted offer. If you should subse­quently engage in a certain trans­ac­tion (conver­sion), the publisher will receive a respec­tive commis­sion in exchange for the service. To be able to compute the commis­sion amount, the affil­i­ate network oper­a­tor must be in a posi­tion to track the ad that has resulted in you seeing the offer and in you complet­ing the prede­fined trans­ac­tion. To make this possi­ble, cook­ies or compa­ra­ble recog­ni­tion tech­nolo­gies are deployed (e.g., device fingerprinting).

Data is stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website oper­a­tor has a legit­i­mate inter­est in the correct compu­ta­tion of its affil­i­ate compen­sa­tion. If appro­pri­ate consent has been obtained, the process­ing is carried out exclu­sively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the consent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device finger­print­ing) within the mean­ing of the TDDDG. This consent can be revoked at any time.

We partic­i­pate in the follow­ing affil­i­ate programs:

GetYourGuide www.getyourguide.com

9. eCommerce and payment service providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data for the estab­lish­ment, content arrange­ment and modi­fi­ca­tion of our contrac­tual rela­tion­ships. Data with personal refer­ences to the use of this website (usage data) will be collected, processed, and used only if this is neces­sary to enable the user to use our services or required for billing purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.

The collected customer data shall be deleted upon comple­tion of the order or termi­na­tion of the busi­ness rela­tion­ship and upon expi­ra­tion of any exist­ing statu­tory archiv­ing peri­ods. This shall be with­out prej­u­dice to any statu­tory archiv­ing periods.