Privacy Policy

1. General

1.1 What is personal data
Personal data is information that discloses or can disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data
Personal data is used exclusively to establish the contract, define its content, and implement or process the contractual relationship (Art. 6 (1 b) GDPR).

Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f) GDPR).

We may use processors to process your personal data, with whom we have concluded a Data Processing Agreement (DPA) where necessary, but we will not pass on personal data to third parties beyond this.

Only for the fulfillment of the contract will the data be passed on to the shipping company commissioned with the delivery, insofar as this is necessary to deliver ordered goods. The payment data required for the processing of payments will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data is processed in the EU and in countries classified as safe or appropriate by the EU. If personal data is processed in the USA, we try to to ensure that the services we use are certified under the “Data Privacy Framework”.

1.3 Usage data
When visiting the website, general technical information is collected. This is the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. This usage data is registered in a log file for technical reasons and can be used and stored for statistical evaluation of this website. This usage data is not linked to your other personal data.

1.4 Duration of storage
We store your personal data after the termination of the purpose for which the data was collected only as long as this is required by law (especially tax law).

2. Your rights

2.1 Information
You can request information from us as to whether we are processing personal data about you and if so, you have a right to be informed about this personal data and to receive the further information referred to in Art. 15 of the GDPR.

2.2 Right to rectification
You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure
You have the right to demand that we delete the personal data concerning you without undue delay. We are obliged to delete them without delay, in particular, if one of the following reasons applies:

• Your personal data is no longer necessary for the purposes it was collected or otherwise processed.
• You revoke your consent on which the processing of your data was based, and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to erasure does not exist insofar as your personal data is required to assert, exercise, or defend our legal claims.

2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if

• you dispute the accuracy of the data and we therefore verify the accuracy,
• the processing is unlawful and you refuse the deletion and demand the restriction of use instead
• we no longer need the data, but you need it to assert, exercise or defend legal claims,
• you have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.

2.6 Right of withdrawal
Insofar as the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to directly contact the supervisory authority responsible for us, the State Data Protection Officer.

3. Data security

3.1 Data security
All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.

3.2 Sessions and cookies
To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is taken from sessions or through cookies without your express consent and cookies are only used if this is technically necessary for the website (e.g. spam protection for contact form, shopping cart function) and thus the weighing shows that there are no overriding interests on your part (Art. 6 (1 f) GDPR) or there is express consent on your part.
We use cookies after your explicit consent to personalize content and ads, offer social media features, and analyze our website's access. We may share information about your use of our website with our social media, advertising and analytics partners with your consent. Our partners may be able to combine this information with other data that the partners already have about you.
Below you will find the domain, name and duration of cookies used only based on your consent:

• Site cookies
• Third-party cookies
  
  

4. Newsletter

If you register for our newsletter, we use the data required for this purpose or separately provided by you to send you our e-mail newsletter regularly based on your consent according to Art. 6 (1 a) GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options provided in the imprint or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data in a manner that goes beyond this, which is permitted by law and about which we inform you in this statement.

5. Presence on social media platforms

We use the following social media platforms for corporate presentation and communication (explicit reference is made to the privacy statements and opt-out options linked below).

Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland).
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.youronlinechoices.com

Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland)
Datenschutzerklärung und Opt-Out: https://instagram.com/about/legal/privacy/

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Privacy policy: https://www.youtube.com/t/privacy/

These social media platforms may process personal data outside the EU, we refer in this respect to the above privacy statements of the social media platforms.
The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer where your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. For example, your usage profile can be used to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 (1 a) GDPR).

6 Third-party services

6.1 Social media links
We have our own social media pages with third-party providers that can be reached via links from this website. Using the links will take you to the respective websites of the third-party providers (e.g. Facebook). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.

6.2 Cookiebot
We use the tool Cookiebot (operated by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark) on our website. This tool lets us inform you about the cookies used on our website and obtain your consent for certain cookies. The information provided as part of the tool (consent, rejection or preference including date and time), your IP address (in anonymized form), and technical browser data are also sent to Cookiebot in this context to enable this function. In addition, Cookiebot can track user behavior on our website and use the information to improve its service. Cookies are stored for 12 months or shorter if we cancel the service in advance. Furthermore, processing your data will only occur within the European Union or within a country for which an adequacy decision exists. The legal basis for the processing of your data is Art. 6 (1 c) GDPR (fulfillment of legal obligation) or Art. 6 (1 a) GDPR (consent) or Art. 6 (1 f) GDPR (legitimate interest).
You can view the privacy policy of Cookiebot here: https://www.cookiebot.com/en/privacy-policy/

6.3 OpenStreetMap
We use the OpenStreetMap mapping service (operated by the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). OpenStreetMap is used to provide an interactive map on our website that shows you how to find and reach us.
When using OpenStreetMap, data is collected, processed and used about the use of the Maps features by website visitors. The use of OpenStreetMap only takes place with your consent (Art. 6 (1 a) GDPR). You can view the OpenStreetMap privacy policy here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

6.4 Rapidmail
We use the provider rapidmail (operated by rapidmail GmbH) for our newsletter.
Wentzingerstraße 21, 79106 Freiburg im Breisgau). You can register via the input field to receive the newsletter offered on our website. We use the so-called double opt-in procedure. A confirmation e-mail is first sent to your specified e-mail address, with a confirmation request. Registration only becomes effective when you click on the activation link contained in the confirmation e-mail. We use your data transmitted to us exclusively for sending the newsletter, which may contain information or offers. Your data will be transferred to rapidmail. In doing so, rapidmail is prohibited from using your data other than sending the newsletter. Rapidmail is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider, which has been carefully selected following the GDPR and BDSG requirements. You can revoke your consent to the storage of data and its use for newsletter dispatch at any time, e.g. via the unsubscribe link in the newsletter. Thus, the balancing shows that there are no overriding interests on your part for using this service (Art. 6 (1 f) GDPR). Of course, the newsletter is only sent with your consent (Art. 6 (1 a) GDPR). You can view the privacy policy of rapidmail here: https://www.rapidmail.de/datenschutz

6.5 External hosting
Our website is hosted by the external service provider PCXPRESS (operated by Mr. André Heer, Schefflenzer Str. 3, 74743 Seckach). The personal data collected on this website is stored on the servers of PCXPRESS. This may include, but is not limited to, IP addresses, contact information, contract information, website traffic and other data generated by a website. The hoster is used to fulfill the contract with our potential and existing customers (Art. 6 (1 b) GDPR) and in the interest of a safe, fast and efficient provision of our online offer by a professional provider (Art. 6 (1 f) GDPR). PCXPRESS will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
You can view the privacy policy of PCXPRESS here: https://pcxpress.de/datenschutzerklaerung

6.6 CDN by jsdelivr
Our website uses a so-called Content Delivery Network (CDN) by jsdelivr (operated by ProspectOne, Królewska 65A/1, 30-081, Kraków, Poland). A CDN is a network of powerful servers that cache content in various locations worldwide. Thereby, a CDN has two main tasks, on the one hand, it should provide content in the shortest possible time; on the other, it should relieve the web host by distributing the traffic. Your IP address and other browser information are transmitted to the provider to make this possible. The legal basis for using the service is Art. 6 (1 f) GDPR (legitimate interest). You can view the privacy policy of jsdelivr here: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net

6.7 HolidayCheck
We use the widget from HolidayCheck (operated by HolidayCheck AG, Bahnweg 8, 8598 Bottighofen, Switzerland) on our site to show other users' recommendation rate regarding our service. For this purpose, your IP address, the date and time of your visit to our site, the page from which the query is made, and other browser and device information are passed on to the provider for technical reasons. The use of the service serves to protect our legitimate interests in optimal marketing of our offers, which are overriding in the context of a balancing of interests, following Art. 6 (1 f) GDPR. You can view HolidayCheck's privacy policy here: https://www.holidaycheck.de/datenschutz

6.8 Booking
We also use the widget from Booking (operated by Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, The Netherlands) on our website to show other users' rating rate regarding our services. Your IP address and other browser and device information is passed on to the provider for technical reasons. The use of the service takes place within the framework of your consent (Art. 6 (1 a) GDPR) or, if this is not available, based on our legitimate interest in the optimal marketing of our offers (Art. 6 (1 f) GDPR). You can view Booking's privacy policy here: https://www.booking.com/content/privacy.en.html

6.9 Booking tool
As a booking tool, we use the plugin of TourOnline AG, Borsigstraße 26, 73249 Wernau (www.dirs21.de) on our website. Through the plugin's functions, the data you provide as part of the order (e.g. name, address, e-mail, order details, payment information) is also sent to TourOnline AG, stored by it and processed to provide the service technically. The legal basis for the use of the plugin is Art. 6 (1 b) GDPR (contract performance) or Art. 6 (1 a) GDPR (your consent) or Art. 6 (1 f) GDPR (our legitimate interest in proper store processing). You can view the privacy policy of TourOnline AG here: https://www.dirs21.de/disclaimer/

6.10 Vouchers
You can purchase our value vouchers through our partner GastroGuide (operated by mes.mo GmbH, Herdweg 16, 73035 Göppingen). This partner is also your contractual partner. The integration of the plugin of GastroGuide is done to provide you with a simple and quick booking via our partner. You have to click on the voucher option for the booking and then be redirected to GastroGuide. The use of the plugin takes place within the framework of your consent (Art. 6 (1 a) GDPR) or, if this is not available, based on our legitimate interest in enabling easy and appealing use of the service (Art. 6 (1 f) GDPR). You can find GastroGuide's privacy policy here: https://www.gastroguide.de/footer/datenschutzerklaerung

6.11 Cloudflare
We use the Cloudflare service (operated by Cloudflare Inc., 101 Townsend St, 94107 San Francisco, USA) to reload our content and to ensure the full functionality of our website. In this context, your browser may transmit personal data (e.g. your IP address) to Cloudflare in order to provide the service. Data processing may also take place in the USA.

We have concluded an Data Processing Agreement with Cloudflare. This is a contract in which Cloudflare undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.

Cloudflare itself may also use a CDN. A CDN is a network of powerful servers that cache content in different locations around the world. A CDN has two tasks: to provide content in the shortest possible time and to relieve the web host by distributing the data traffic.

The service is used on the basis of your consent (Art. 6 I (1 a) GDPR) or, if this is not available, on the basis of our legitimate interest in enabling simple and appealing use of our online offer (Art. 6 I (1 f) GDPR).
Further information on the handling of the transferred data can be found in Cloudflare's privacy policy: https://www.cloudflare.com/de-de/privacypolicy/.
You can prevent the collection and processing of your data by Cloudflare by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find this at www.noscript.net or www.ghostery.com, for example).

6.12 Google Analytics 4
This website uses Google Analytics 4, a web analysis service from Google, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and collects and stores some of your data via this web analysis service. This data includes:

• Your approximate location (region)
• Your IP address (in truncated form)
• technical browser information
• technical information about the end device used (e.g. screen resolution)
• Your internet provider
• Page views
• First visit to the website
• Start of the session
• Click sequence
• Interaction with and on our website (e.g. clicking on links or videos, ads clicked on)
• Scrolls on the website
• Search queries
• File downloads
• Language setting
• Referrer URL

We use the service to evaluate visitor behavior on our website and to design and improve the offer presented on our website in line with requirements.

Google Analytics 4 also uses so-called “cookies”, small text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

In addition to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) and Alphabet Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) also receive the data.

IP anonymization is preset in Google Analytics 4. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Google will use the collected data on our behalf to evaluate the use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics 4 will not be merged with other Google data. Google Analytics 4 is only used with your express consent (Art. 6 I (1 a) GDPR). The data collected by Google Analytics 4 is automatically deleted after 2 months.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en). Furthermore you can prevent the collection of your data by Google Analytics 4 by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics 4. This does not affect the lawfulness of processing based on consent before its withdrawal. You can view Google's privacy policy at https://policies.google.com/privacy?hl=en. You can find more information on the terms of use at https://marketingplatform.google.com/about/analytics/terms/us/.

6.13 Google DoubleClick
This website uses the online marketing tool DoubleClick (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on the advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.You can prevent participation in this tracking process by selecting the appropriate settings in your browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. DoubleClick is only used with your consent (Art. 6 I (1 a) GDPR). You can view Google's privacy policy here: https://policies.google.com/privacy?hl=en

6.14 Google Tag Manager
This website also uses Google Tag Manager (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This tool implements tags and makes it possible to manage these website tags via an interface. No cookies are used for this purpose. However, your IP address may be transmitted to the Google Tag Manager. The Google Tag Manager triggers other tags, which in turn may also collect other data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.

If personal data is processed, the Google Tag Manager is used exclusively with your express consent (Art. 6 I (1 a) GDPR).

You can view Google's privacy policy here: https://policies.google.com/privacy?hl=en

7. Application procedure

You can apply to us electronically, by telephone and in writing. Of course, we will only use your information to process your application and not pass it on to third parties. Please note that if you send your application by e-mail, unencrypted e-mails will not be protected against unauthorized access. Your personal data will be deleted immediately after completion of the application process or after a maximum of 6 months, unless you have given us your express consent to store your data for longer or a contract has been concluded. The legal basis is Art. 6 (1 a) or (1 b) or (1 f) GDPR and § 26 BDSG.

8. Contacting us

You are welcome to use the following contact options to contact us regarding data protection. Responsible person in the sense of the GDPR:

Marita Schaffers GmbH
Edelfingerstr. 7
97980 Bad Mergentheim
Germany

E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: +49 7931 9712 0