Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain how, for what purpose, and on what legal basis we process your data.

Für die Datenverarbeitung auf dieser Webseite und in unserem Unternehmen ist verantwortlich:

Jennifer Dinkel
Robert-Koch-Straße 38
72766 Reutlingen
Phone: Will be added later
Email: info@mitunsaufreisen.de

General Information

SSL or TLS Encryption

When you enter your data on websites, place online orders, or send emails over the internet, you must always assume that unauthorized third parties may access your data. Full protection against such access does not exist. However, we strive to protect your data to the best of our ability and close security gaps as far as possible. An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon before the entered internet address in your browser and by the fact that our internet address begins with https:// instead of http://.

How Long Do We Store Your Data?

In some parts of this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If no such information is provided, we store your data until the purpose of data processing ceases, you object to data processing, or you revoke your consent to data processing.

In the case of an objection or revocation, we may continue to process your data if at least one of the following conditions applies:

We have compelling legitimate grounds for continuing data processing that override your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot assert legitimate grounds).
Data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct marketing).
We are legally obligated to retain your data. In this case, we will delete your data as soon as the condition(s) cease to apply.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data Transfer to the USA

We also use tools on our website from companies that transfer your data to the USA, where it is stored and, if necessary, further processed. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This decision states that the USA provides an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new guarantees and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and safeguards regarding access by US intelligence services to data. Binding guarantees have been introduced to limit access by US intelligence services to the necessary and proportionate level for protecting national security. Furthermore, increased oversight of US intelligence activities has been established to ensure that restrictions on surveillance activities are followed. An independent redress mechanism has also been established to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus allows European companies to transfer data to certified US companies without needing to introduce additional data protection guarantees. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search
A change in the European Commission’s decision cannot be ruled out.

Your Rights

Objection to Data Processing

If you read in this privacy policy that we have legitimate interests in processing your data and therefore base this on Art. 6(1)(1)(f) GDPR, you have the right to object under Art. 21 GDPR. This also applies to profiling based on the mentioned provision. The prerequisite is that you provide reasons for the objection based on your particular situation. No justification is required if the objection is directed against the use of your data for direct marketing.The consequence of the objection is that we are no longer allowed to process your data. This does not apply if one of the following conditions is met:

We can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms.
Processing is necessary for the assertion, exercise, or defense of legal claims. These exceptions do not apply if your objection is directed against direct marketing or profiling related to it.

Further Rights

Withdrawal of Your Consent to Data Processing

Many data processing operations are based on your consent, for example, by ticking a box in online forms before submitting the form or by allowing certain cookies when visiting our website. You can withdraw your consent at any time without providing reasons (Art. 7(3) GDPR). From the time of withdrawal, we may no longer process your data. The only exception is if we are legally required to retain the data for a certain period. Such retention periods exist, especially in tax and commercial law.

Right to Complain to the Competent Supervisory Authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. You can contact a supervisory authority in the Member State of your residence, your workplace, or the place where the alleged violation occurred. The right to complain exists alongside administrative or judicial remedies.

Right to Data Portability

Data that we process automatically on the basis of your consent or in fulfillment of a contract must be provided to you or a third party in a common machine-readable format upon request. We can only transfer the data to another controller if this is technically possible.

Right to Access, Deletion, and Correction of Data

Under Art. 15 GDPR, you have the right to obtain information about the personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have the right to correction (Art. 16 GDPR). Under the conditions of Art. 17 GDPR, you may request that we delete the data.

Right to Restrict Processing

In certain situations, you may request that we restrict the processing of your data under Art. 18 GDPR. Except for storage, data may then only be processed as follows:

With your consent
For asserting, exercising, or defending legal claims
To protect the rights of another natural or legal person
For reasons of important public interest of the European Union or a Member State

The right to restrict processing applies in the following situations:

You have disputed the accuracy of your personal data stored with us, and we need time to verify it. Here, the right exists for the duration of the verification.
The processing of your personal data is unlawful or was unlawful in the past. Here, the right applies as an alternative to data deletion.
We no longer need your personal data, but you need it for asserting, exercising, or defending legal claims. Here, the right applies as an alternative to data deletion.
You have objected under Art. 21(1) GDPR, and now your and our interests must be balanced. Here, the right exists as long as the result of the balancing is not yet determined.

Hosting and Content Delivery Networks (CDN)

External Hosting
Our website is hosted on a server of the following internet service provider (host):
Webflow, Inc.
398 11th Street
2nd Floor
San Francisco, CA 94103, USA

How Do We Process Your Data?
The host stores all data on our website. This includes all personal data that is automatically or entered by you. This may include, in particular, your IP address, accessed pages, names, contact information, inquiries, as well as meta and communication data. Our host adheres to our instructions and only processes data to the extent necessary to fulfill its obligations to us.

On What Legal Basis Do We Process Your Data?
Since we use our website to reach potential customers and maintain contacts with existing customers, the data processing by our host serves to initiate and fulfill contracts and is therefore based on Art. 6(1)(b) GDPR. In addition, as a company, it is our legitimate interest to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. Accordingly, we also process your data on the basis of Art. 6(1)(f) GDPR.

Data Collection on This Website

Use of Cookies
Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function (necessary cookies). Others are needed to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the shopping cart features in an online shop. Other cookies are used to analyze user behavior or optimize advertising measures. When we use third-party services on our website, such as processing payments, these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

How Do We Process Your Data?
Session cookies are only stored on your device for the duration of a session. Once you close the browser, they disappear automatically. In contrast, permanent cookies remain on your device if you do not delete them yourself. This may lead to a permanent analysis of your user behavior. You can control how your browser handles cookies through its settings:

Do you want to be informed when cookies are set?
Do you want to exclude cookies in general or in certain cases?
Do you want cookies to be deleted automatically when the browser is closed?

If you disable or do not allow cookies, the functionality of the website may be limited. If we use cookies from other companies or for analysis purposes, we will inform you in this privacy policy. We will also request your consent when you visit our website.

On What Legal Basis Do We Process Your Data?
We have a legitimate interest in ensuring that visitors can use our online offerings without technical issues and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6(1)(f) GDPR. We only use other cookies on the basis of Art. 6(1)(a) GDPR, provided you give us your consent. You can withdraw this consent at any time with future effect. If you consent to the placement of necessary and functional cookies, these cookies will also only be stored based on your consent.

Server Log Files
Server log files log all requests and accesses to our website and record error messages. They also include personal data, in particular, your IP address. However, this is anonymized by the provider after a short time, so we cannot associate the data with you. The data is automatically transmitted by your browser to our provider.

How Do We Process Your Data?
Our provider stores the server log files to trace activities on our website and identify errors. The files contain the following data:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address (if necessary, anonymized)

We do not combine this data with other data but use it only for statistical analysis and to improve our website.

On What Legal Basis Do We Process Your Data?
We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of accesses to our website. The data processing is therefore lawful under Art. 6(1)(f) GDPR.

‍

Contact Form
You can send us a message via the contact form on this website.

How Do We Process Your Data?
We store your message and the information from the form to handle your inquiry, including any follow-up questions. This also includes the contact details provided. We do not share the data with other parties without your consent.

How Long Do We Store Your Data?
We delete your data as soon as one of the following conditions is met:

Your inquiry has been fully processed.
You request that we delete your data.
You withdraw your consent to store the data. This does not apply if we are legally required to retain the data.

On What Legal Basis Do We Process Your Data?
If your inquiry is related to our contractual relationship or serves to conduct pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, our legitimate interest is in efficiently processing inquiries addressed to us. Therefore, the legal basis for data processing is Art. 6(1)(f) GDPR. If you have consented to the storage of your data, Art. 6(1)(a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.

Inquiries by Email, Phone, or Fax
You can send us a message via email or fax or call us.

How Do We Process Your Data?
We store your message and the contact details you provide, or the transmitted phone number, to handle your inquiry, including any follow-up questions. We do not share the data with other parties without your consent.

How Long Do We Store Your Data?
We delete your data as soon as one of the following conditions is met:

Your inquiry has been fully processed.
You request that we delete your data.
You withdraw your consent to store the data. This does not apply if we are legally required to retain the data.

Comment Function
You have the option to comment on content on our website via the respective input fields. To use the comment function, you must provide your email address. Additionally, it is possible to subscribe to other users’ comments.

How Do We Process Your Data?
When you leave comments on our website, we store the following data:

Your comment
Your email address
The time of the comment
Other data you provide as part of your comment, e.g., your username
Your IP address

We store data that can identify you to take legal action against you if your comment is offensive, incites hate, or is otherwise relevant to criminal law. If you subscribe to comments, we will send you an email to verify that you are the owner of the provided email address. You can unsubscribe from receiving comments at any time via a link in this email.

How Long Do We Store Your Data?
We store your comments and associated data until the commented content is completely deleted or the comments must be deleted for legal reasons, e.g., because they violate criminal laws. If you have subscribed to comments and unsubscribe, all data provided within the subscription will be deleted. If we have also stored your data for another reason, e.g., because you have subscribed to our newsletter, this data will not be affected by the deletion.

On What Legal Basis Do We Process Your Data?
By using the comment function, you consent to the storage of your data. The basis of data processing is thus Art. 6(1)(a) GDPR. You can withdraw your consent at any time by emailing us with your withdrawal. From that point, we may no longer process your data.

Analytics Tools and Advertising
We use the following tools to analyze the behavior of our website visitors and display advertisements to you.

Google Tag Manager
What is Google Tag Manager?
A tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who Processes Your Data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Privacy in Google Tag Manager?
https://policies.google.com/privacy

On What Basis Do We Transfer Your Data to the USA?
Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How Do We Process Your Data?
We use Google Tag Manager, which helps us integrate, manage, and deliver tracking codes and conversion pixels on our website. Google Tag Manager does not itself create user profiles, place cookies on your device, or analyze your user behavior. However, it captures your IP address and transmits it to Google servers in the USA.

On What Legal Basis Do We Process Your Data?
We have a legitimate interest in quickly and easily integrating and managing various tools on our website. Therefore, the use of Google Tag Manager is lawful under Art. 6(1)(f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

Google Analytics
What is Google Analytics?
A tool for analyzing user behavior provided by Google Ireland Ltd.

Who Processes Your Data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a Data Processing Agreement Been Concluded with Google Analytics?
Yes

Where Can You Find More Information About Privacy in Google Analytics?
https://support.google.com/analytics/answer/6004245?hl=en

On What Basis Do We Transfer Your Data to the USA?
Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How Can You Prevent Data Collection?
For example, by using a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

How Do We Process Your Data?
We are always interested in optimizing our web offerings for the visitors of our website and placing advertising optimally. Google Analytics helps us with this, as it analyzes user behavior and provides us with the necessary data to make adjustments. Through this tool, we receive information about the origin of our visitors, their page views, time spent on pages, and the operating system used.

Standard Processing
To collect the data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google servers in the USA and aggregated into a profile using the IP address collected, which can be assigned to you or your device. You can prevent Google from processing your data by installing a browser plugin provided by Google: https://tools.google.com/dlpage/gaoptout?hl=en.

IP Anonymization
We have enabled the "IP Anonymization" function within Google Analytics. This means that Google shortens your IP address (from the EU or EEA) before transmitting it to the USA. Only in exceptional cases will Google transmit the full IP address to servers in the USA and shorten it there.

How Long Do We Store Your Data?
According to Google, data stored at the user and event level, linked to cookies, user IDs (e.g., user IDs), or advertising IDs, is deleted or anonymized after 14 months (see https://support.google.com/analytics/answer/7667196?hl=en).

On What Legal Basis Do We Process Your Data?
As website operators, we have a legitimate interest in analyzing user behavior to optimize our website and the advertising placed there. Therefore, data processing is lawful under Art. 6(1)(f) GDPR. In cases where, for example, you have agreed to the storage of cookies or otherwise consented to data processing by Google Analytics, Art. 6(1)(a) GDPR is the sole legal basis. You can withdraw your consent at any time with effect for the future.

Plugins and Tools

Google Fonts (Local Hosting)
We use fonts from the US company Google on our website. The fonts are installed locally, so no connection to Google’s servers occurs when you visit our website.
For more information on Google Fonts, see https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps
What is Google Maps?
A map service from Google Ireland Ltd.

Who Processes Your Data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where Can You Find More Information About Privacy in Google?
https://policies.google.com/privacy?hl=en

On What Basis Do We Transfer Your Data to the USA?
Based on the European Commission’s adequacy decision and the corresponding certification of the company.

How Do We Process Your Data?
We use Google Maps on our website. To allow you to use all functions of the map service, Google stores your IP address on one of its servers in the USA.

On What Legal Basis Do We Process Your Data?
The maps from Google Maps make it easier for visitors to find the locations listed on our website. As a company, we have a legitimate interest in this. Therefore, data processing is lawful under Art. 6(1)(f) GDPR. If you have consented to data processing, we process your data solely on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time. From that point, we may no longer process your data.

OpenStreetMap
What is OpenStreetMap?
A map service by the OpenStreetMap Foundation

Who Processes Your Data?
OpenStreetMap Foundation (OSMF), Cowley Road, St John's Innovation Centre, Cambridge CB4 0WS, United Kingdom

Where Can You Find More Information About Privacy in OpenStreetMap?
https://wiki.osmfoundation.org/wiki/Privacy_Policy

How Do We Process Your Data?
We use maps from the OpenStreetMap Foundation on our website. This means that your IP address and information about your browsing behavior is forwarded to and stored by the foundation when you visit our website. The foundation places cookies on your device for this purpose or uses comparable recognition technologies. If you have allowed your device settings to determine your location, OpenStreetMap will also store this data.

On What Legal Basis Do We Process Your Data?
The maps from OpenStreetMap make it easier for visitors to find the locations listed on our website. As a company, we have a legitimate interest in this. Therefore, data processing is lawful under Art. 6(1)(f) GDPR. If you have consented to data processing, we process your data solely on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time. From that point, we may no longer process your data.

Data Processing on Social Media
What is Social Media?
By social media, we mean the social networks on which we have created publicly accessible profiles. You can find out which social networks these are below.

Who Processes Your Data?
The respective operators of the social networks. You can find the individual operators below under each network.

How is Your Data Processed?
The operators of social networks are generally able to collect and analyze extensive data about the behavior of visitors and users of the network. It is not possible for us to track all processing activities on the social networks we use; therefore, additional processing activities not listed here may be conducted by the social network operators. For more information, see the terms of use and privacy policies of the respective social networks.
Processing your data may be triggered by visiting the social network’s website or our profile page there. If you visit a website that uses certain network content, such as like or share buttons, data may already be transmitted to the social network operator. If you are a user of the social network and logged into your user account, the operator can assign your visit to our profile page to your account. Even if you are not a registered user or are not logged in, the network operator may still collect your personal data, such as by recording your IP address or setting cookies. Using this data, operators can create user profiles tailored to your behavior and interests and show you interest-based advertising both within and outside the network. If you are a registered user of the network, interest-based advertising can also be shown on all devices on which you are or have been logged in.

On What Legal Basis Is Your Data Processed?
Our profiles on social networks aim to ensure the most comprehensive online presence possible for our company. As a company, we have a legitimate interest in this. Therefore, data processing is lawful under Art. 6(1)(f) GDPR. The data processing activities and analyses carried out by the social network operators may be based on other legal grounds. These must be provided by the operators of the social networks.

Who Is Responsible for Processing Your Data, and How Can You Exercise Your Rights?
If you visit one of our profiles on social networks, we share responsibility with the operator of the respective network for the data processing activities triggered by this visit. You can assert your rights both against us and the operator of the respective network. Despite shared responsibility with the social network operators, our influence on the data processing activities of the respective operator is limited and depends primarily on the operator’s guidelines.

How Long Is Your Data Stored?
If we collect data via our profiles on social networks, it is deleted from our systems as soon as the purpose of storage no longer applies, you request deletion, or you withdraw your consent to storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions, especially retention periods, remain unaffected. We have no control over how long the operators of social networks store your data collected for their own purposes. Information about this can be obtained directly from the operator of the respective social network, for example, in the respective privacy policy.

Which Social Media Do We Use?

Facebook
What is Facebook?
A social network

Who Processes Your Data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?
Yes, to the USA and also to other third countries
Where Can You Find More Information About Privacy on Facebook?
https://www.facebook.com/about/privacy/

Where Can Facebook Users Adjust Their Ad Settings?
As a registered Facebook user, you can adjust your ad settings in your user account. Click the following link and log in: https://www.facebook.com/settings?tab=ads.

Instagram
What is Instagram?
A social network specializing in photos and videos

Who Processes Your Data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is Your Data Transferred to Third Countries?
Yes

Where Can You Find More Information About Privacy on Instagram?
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Help&bc[1]=Policies%20and%20Reporting

Where Can Users Adjust Their Privacy Settings?
As a registered Instagram user, you can adjust your privacy settings in your user account. Click the following link and log in: https://www.instagram.com/accounts/privacy_and_security/