Introduction

Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information about how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal data protection regulations.

Controller within the meaning of data protection law

Skihallen Service GmbH

Horstfeldweg 9

29646 Bispingen

hallo@abenteuer-resort.de

05194 / 43 11 0

Data Protection Officer

Proliance GmbH / www.datenschutzexperte.de

Data Protection Officer

Leopoldstr. 21

80802 Munich

Germany

datenschutzbeauftragter@datenschutzexperte.de

Definitions

Our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

 

Data processing by visiting our website

When you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during a running connection for communication between your internet browser and our web server:

 

• Visited domain
• The date and time of the request
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• The web browser, system language, operating system and device type used
• IP address of the requesting computer
• The amount of data transferred

We collect the listed data to ensure a smooth connection to the website and to enable a comfortable use of our website. In addition, the log file serves the purpose of evaluating system security and stability, as well as providing administrative functions. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to prevent attempts to attack our web server, we may temporarily store this data. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is made anonymous by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This data is not evaluated in anonymous form except for statistical purposes. This data is not combined with data from other data sources.

 

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are either temporarily stored on your end device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic solution is provided by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behavior or display advertising.

Technically necessary cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimised presentation of our services. Other cookies are only stored with your consent on the basis of Art. 6 para. 1 lit. a GDPR. This consent can be withdrawn at any time for the future. The legal basis may also result from Art. 6 para. 1 lit. b GDPR if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

Insofar as cookies are used for analysis purposes, we will inform you of this separately within the framework of this privacy policy and obtain your consent.

You can set your browser to

• be informed about the setting of cookies,
• only allow cookies in individual cases,
• exclude the acceptance of cookies for certain cases or generally,
• activate the automatic deletion of cookies when the browser is closed.

The cookie settings can be managed under the following links for each browser:

Google Chrome

Mozilla Firefox

Edge (Microsoft)

Safari

Opera

You can also manage cookies of many companies and functions used for advertising individually. To do this, use the appropriate user tools, available at https://www.aboutads.info/choices/ or  http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called “do-not-track function”. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be “tracked” for behavioral advertising and the like.

For information and instructions on how to edit this feature, please refer to the links below, depending on your browser provider:

Google Chrome

Mozilla Firefox

Edge (Microsoft)

Safari

Opera

Additionally, you can prevent the loading of so-called scripts by default. “NoScript” allows the execution of JavaScripts, Java and other plug-ins only at trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you disable cookies, the functionality of our website may be limited.

General data processing on this website

Contact form and contact by email

If you send us requests via contact form or email, your details from the enquiry form or email, including the contact data you have provided there, will be stored for the purpose of processing the request and in the event of follow-up questions. You are required to provide an email address to contact us. Your name and telephone number are optional. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.

Google Ads

We use Google Ads on this website. Google Ads is an online advertising service, which enables advertisers to display ads in Google search engine results as well as Google advertising networks. The advertiser can predefine keywords which lead to the appearance of the advertisement as soon as the user searches for content relevant to the keyword. In the Google advertising networks, advertisements are displayed with the help of an automatic algorithm taking the predefined keywords into account. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. “(“Google”). The purpose for using Google Ads is the advertisement of our website by displaying relevant advertising on third party websites and Google search engine results, as well as displaying third party advertising on our website. When a user comes on our website via Google Ads, Google sets a conversion cookie on the information technology system of the person concerned. A conversion cookie expires after thirty years and is not used to identify the person. The conversion cookie allows us, amongst other things, to identify if specific subpages were visited or the shopping cart of the shop system was used.  The conversion cookie enables us as well as Google to identify, whether a person, who visited our website vie Google Ad, generated profit by buying our products/services. Data which are collected by the conversion cookie are used by Google to create visitor statistics for our website. These statistics are used by us to determine the overall visits based on advertisements in order to figure out the success of the respective advertisements to ultimately optimise their use. Our companies as well as advertising customers of Google do not receive information which could be used to identify a person concerned. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your given consent. During every visit of our website, personal data, including the IP-address of the person concerned, are transferred to Google. The personal data may be stored by Google in the USA. The person concerned can prevent the setting of cookies and permanently object it by adjusting the browser settings. This setting would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. Additionally, cookies that have already been set by Google Ads can be deleted at any time via the browser or other software programs. Furthermore, the person concerned has the possibility to object targeted advertising by Google. Therefore, the person concerned has to view the link for each browser they use at www.google.de/settings/ads and change the settings. More information and the applicable privacy regulations of Google can be viewed at https://www.google.de/intl/de/policies/privacy/.

 

Google Web Fonts

This site uses web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to uniformly display fonts. Google Web Fonts allows us to use external fonts, so-called Google Fonts. When you visit our website, the required Google Font is loaded from your web browser into your browser cache to display texts and fonts correctly. This is necessary so that your browser can also show an optically improved representation of our texts. If your browser does not support this feature, your computer will use a standard font for display. These web fonts are integrated by a server call, usually a Google server in the USA. This transfers to the server which page of our website you have visited. Google also stores the IP address of the browser of the visitor’s terminal device.

We use Google Web Fonts for optimization purposes, in particular to improve the use of our Internet presence for you and to make its design more user-friendly. This is also our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Google has signed and certified itself under the Privacy Shield Agreement between the European Union and the USA. By doing so, Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found at: https://www.privacyshield.gov/participant?id=a2zt00000000001L5AAI&status=Active

Further information on data protection can be found in Google’s data protection declaration: http://www.google.de/intl/de/policies/privacy

For more information about Google Web Fonts, visit http://www.google.com/webfonts/, https://developers.google.com/fonts/faq?hl=en-GB&csw=1 and https://www.google.com/fonts#AboutPlace:about.

YouTube

We use YouTube plugins our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If you visit a website that is operated by us and uses a YouTube plugin, a connection to YouTube servers will be established. YouTube servers will be informed about which of our websites you visited. When you are logged in your YouTube account, you enable YouTube to assign your browsing behavior to your particular account. You can prevent this by logging out of your account. Further information about the handling of user data are stated in YouTube’s privacy policy, available at: https://www.google.de/intl/de/policies/privacy.

We use the advanced privacy mode which, according to the provider, only leads to the storage of user information when a video is actively played. When embedded YouTube videos are played, the provider uses cookies in order to collect information about user behavior. This procedure enables YouTube to record video statistics, enhance user friendliness and prevent abusive behavior. When you are logged in your Google account, your data will be assigned to your account when you play videos. You can prevent the assignment by logging out of your account before playing the video. Google stores the data (also for users that are not logged in) in the form of user profiles and analyses them. The legal basis for the analysis is Google’s legitimate interest in displaying personalized advertisement, market research and adequate website presentation. You have the right to object the creation of user profiles. If you want to want to exercise this right, you have to address YouTube. By visiting this website, a connection to the Google network “DoubleClick” is established, independently from playing an embedded video, and can lead to further data processing, which are not influenced by us. Google is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

Data transfer and recipient

We do not sell your personal data to third parties. Your personal data will not be passed on to third parties unless

• we have explicitly indicated this in the description of the respective data processing,
• you have given your explicit consent in accordance to Art. 6 para. 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an outright interest worthy of protection in not disclosing your data,
• that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 lit. c GDPR and
• this is required under Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you.

We also use external service providers, which we have carefully selected and commissioned in writing, to carry out our services. They are bound by our instructions and are regularly checked by us.  With which we have concluded order processing contracts in accordance with Art. 28 GDPR, if necessary. These are service providers for web hosting, sending e-mails and maintaining our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

In accordance with Art. 32 GDPR and having regard to the latest state of the art, the costs of implementation, the type, scope, circumstances and purpose of the processing as well as various probabilities of occurrence and severity of risks for rights and freedoms for natural per-sons, we take suitable technical and organizational measures in order to guarantee an appropriate level of protection. This website uses SSL-encryption for safety reasons and in order to secure the transfer of confidential content.

Storage period of personal data

The duration of the storage of personal data is determined by the relevant legal retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is necessary for contract fulfilment or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if it is no longer necessary for these purposes or if you make use of your right of revocation or objection.

Your rights

In the following section you will find information on the rights of data subjects which are grant-ed to you by the current data protection laws with regard to the controller of the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your da-ta, if they have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information regarding their details.

The right to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR.

The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.

The right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible in accordance with Art. 20 GDPR.

The right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we have our registered office or, if applicable, that of your usual place of work or usual residence.

The right to revoke consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of con-sent shall not affect the legality of the processing carried out on the basis of the consent until revocation;

Right of objection

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is for reasons resulting from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to indicate a special situation.

If you would like to make use of your right of withdrawal or objection, simply send an email to hallo@abenteuer-resort.de.

External links

On our website Gurado and Social Media (Facebook, Instagram) is solely embedded as a link to the respective service. After clicking on the embedded text/image-link you will be directed to the website of the respective provider. User information will be only transferred after the redirection to the respective provider. Information regarding the use of your personal data through the use of the website can be found in the privacy policies of the visited websites.

Subject to alterations

We reserve the right to change this Privacy Policy at any time in accordance with the law. In this way, we can adapt it to current legal requirements and take changes in our services into account, e.g. when introducing new services. The most current version applies to your visit.

Status of this privacy policy: 01.04.2020