• "Website" or "Internet presence" hereinafter means all pages of the controller on https://www.upstalsboom.de.
• "Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data therefore includes, for example, a person's name, email address and telephone number, but may also include data about preferences, hobbies and memberships.
• "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• "Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• "Consent" hereinafter means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• "Google" also refers to Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; in the European Union accessible at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

The privacy policy applies to all pages of https://www.upstalsboom.de. It does not extend to any linked websites or internet presences of other providers.

Responsible for the processing of personal data within the scope of this privacy policy is

Upstalsboom Hotel + Freizeit GmbH & Co KG
Friedrich-Ebert-Str. 69-71
26725 Emden
info@upstalsboom.de

If you have any questions about data protection with regard to our company or our website, please write to datenschutz@upstalsboom.de

We have integrated the consent management tool "consentmanager"(www.consentmanager.net) from Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website to request consent for data processing or the use of cookies or comparable functions. With the help of "consentmanager", you have the option of giving or refusing your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measuring reach and personalised advertising. You can use "consentmanager" to give or refuse your consent for all functions or give your consent for individual purposes or individual functions. You can also change the settings you have made at a later date. The purpose of integrating "consentmanager" is to allow the users of our website to decide on the aforementioned matters and to offer the possibility of changing settings already made during the further use of our website. In the course of using "consentmanager", personal data and information about the end devices used, such as the IP address, are processed.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c) in conjunction with Art. 6 para. 3 sentence 1 lit. f) GDPR. Art. 6 para. 3 sentence 1 lit. a) in conjunction with. Art. 7 para. 1 GDPR and alternatively lit. f). By processing the data, we help our customers (the controller according to the GDPR) to fulfil their legal obligations (e.g. obligation to provide evidence). Our legitimate interests in the processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities. "Consentmanager" stores your data for as long as your user settings are active. After two years after the user settings have been made, your consent will be requested again. The user settings made will then be saved again for this period.

You can object to the processing. You have the right to object on grounds relating to your particular situation. To object, please send an email to info@consentmanager.net.

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

You have the following rights with regard to the personal data concerning you, which you can assert against us:

• Right of access (Art. 15 GDPR),
• Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to object to processing (Art. 21 GDPR),
• Right to withdraw your consent (Art. 7 para. 3 GDPR),
• Right to receive the data in a structured, commonly used and machine-readable format ("data portability") and the right to transmit the data to another controller if the requirements of Art. 20 para. 1 lit. a, b GDPR are met (Art. 20 GDPR)

You can assert your rights by sending a message to the contact details specified in the "Responsible provider" section or to the data protection officer appointed by us.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

In principle, you can use our website for purely informational purposes without disclosing your identity. When accessing the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This is the following data:

• Browser type/browser version
• Operating system used
• Language and version of the browser software
• Host name of the accessing end device
• IP address
• Website from which the request originates
• Content of the request (specific page)
• Date and time of the server request
• Access status/HTTP status code
• Referrer URL (the previously visited page)
• Amount of data transferred
• Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address by the system is necessary to technically enable delivery of the website to your computer. It is therefore necessary to process your IP address for the duration of the session. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The access data is not used to identify individual users and is not merged with other data sources. The access data is deleted when it is no longer required to fulfil the purpose for which it was processed. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context either. The data is generally deleted after seven days at the latest; processing beyond this period is possible in individual cases. In this case, the IP address is deleted or anonymised so that it is no longer possible to identify the calling client.

The collection of data for the provision of the website and the processing of data in log files is absolutely necessary for the operation of the website. You can object to the processing. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling legitimate grounds on the basis of which we will continue the processing.

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute programmes. They are used to make our website more user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysing/evaluating website use).

1. a) Technically necessary cookies

Some elements of our website require that the accessing browser can be identified even after a page change. The cookies process data about language settings, among other things.

The user data collected by technically necessary cookies is not processed to create user profiles. We also use so-called "session cookies", which store a session ID that can be used to assign various requests from your browser to the joint session. Session cookies are necessary for the use of the website. In particular, they allow us to recognise the device you are using when you return to the website. We use this cookie to recognise you on subsequent visits to the website if you have an account with us; otherwise you would have to log in again each time you visit. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. We use session cookies to make the use of the website more attractive and effective. The session cookies are deleted as soon as you log out or close the browser.

Most browsers are preset to accept cookies automatically. You can object to the processing of your data by cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

1. b) Cookies that are not technically necessary

We also use cookies on the website that enable an analysis of the user's surfing behaviour. The following data, for example, is stored and processed in the cookies

• Frequency of page views
• Utilisation of website functions

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Cookies that are not technically necessary are automatically deleted after a specified period, which may vary depending on the cookie.

You can object to the processing of your data by cookies. If you do not wish cookies to be used, you can change your browser settings to block the storage of cookies in general or selectively or to remove cookies that have already been stored. You can also have corresponding information displayed before a cookie is set. If you change the browser settings for the use of cookies or deactivate cookies, the functionality of this website may be restricted.

If we integrate third-party cookies into our website, we will inform you of this separately below.

When you contact our company, e.g. by email or via the contact form on the website, the personal data you provide will be processed by us in order to respond to your enquiry.

It is mandatory to provide a name or pseudonym and a valid e-mail address in order to process enquiries via the contact form on the website. The following data is also processed when the message is sent to us

• IP address
• Date/time of registration
• Surname
• First name
• title
• Your address
• Telephone number

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. b) GDPR if the contact is aimed at the conclusion of a contract.

The processing of the personal data from the input mask serves us solely to process the contact. If contact is made by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

No data is passed on to third parties in this context. The data is processed exclusively for the purpose of processing the conversation. We delete the data collected in this context after processing is no longer necessary or restrict processing to compliance with existing mandatory statutory retention obligations.

You have the option to object to the processing of your personal data for contact enquiries at any time. This is the case if, in particular, the processing is not required to fulfil a contract with you, which is described by us in the previous description of the functions. In such a case, it may not be possible to continue processing the enquiry. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this arises from Art. 6 para. 1 sentence 1 lit. b) GDPR.

Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted, unless we are entitled to further storage and processing required in the respective context on the basis of a consent given by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of legitimate interests (e.g. storage for the enforcement of claims).

Your personal data will be passed on if

• it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. when passing on data to a payment service provider/shipping company to process a contract with you), (Art. 6 para. 1 sentence 1 lit. b) GDPR), or
• a subcontractor or vicarious agent that we use exclusively in the context of providing the offers or services requested by you requires this data (unless you are expressly informed otherwise, such auxiliary persons are only authorised to process the data to the extent that this is necessary for the provision of the offer or service) or
• there is an enforceable official order (Art. 6 para. 1 sentence 1 lit. c) GDPR) or
• there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) GDPR) or
• we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) GDPR) or
• processing is necessary in order to protect the vital interests of the data subject or of another natural person (Art. 6 para. 1 sentence 1 lit. d) GDPR) or
• we are authorised or even obliged to disclose data in order to pursue overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Your personal data will not be disclosed to other persons, companies or organisations beyond this unless you have effectively consented to such disclosure. The legal basis for processing is then Art. 6 para. 1 sentence 1 lit. a) GDPR.

If you wish to place an order in our voucher shop at https://www.upstalsboom.de/gutscheine.html, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and email address. The mandatory information required for order and contract processing is marked separately; further information is provided voluntarily. We process your data for order processing. In particular, we will forward payment data to your chosen payment service provider or our house bank.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b) GDPR. To prevent unauthorised third parties from accessing your personal data, the order process on the website is encrypted using SSL/TLS technology.

We delete the data collected in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. After two years following termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with your application. We process the data required for the online application process (name, e-mail address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process.

The legal basis for the processing of your personal data in this application process is primarily Section 26 BDSG in the version applicable from 25 May 2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion or defence of claims.

Applicants' data will be deleted after 6 months in the event of rejection. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted there after two years. If you have been accepted for a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

We use a specialised software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.

Your applicant data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then agreed. Within the company, only those persons have access to your data who need it for the proper course of our application procedure.

You have the option to object to the processing of your data at any time. This is the case if the processing is not required in particular to fulfil a contract with you, which is described by us in the previous description of the functions. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Advertising to existing customers

We reserve the right to process the e-mail address provided by you as part of the order in accordance with the statutory provisions in order to send you the following content, among other things, by e-mail during or following the processing of the contract, unless you have already objected to this processing of your e-mail address:

• further interesting offers from our portfolio,
• events organised by our company,
• technical information,
• sending you our catalogue,
• Questions about special requests,
• Overview of possible leisure activities,
• Information on travelling to us by public transport.

Legal basis for the processing Art. 6 para. 1 sentence 1 lit. f) GDPR. We carry out the aforementioned processing for customer care and to improve our services. We delete your data when you cancel your newsletter subscription, but no later than two years after the end of the contract.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. To do this, click on the unsubscribe link in the newsletter or send us your objection to the contact details given in the "Responsible provider" section.

Newsletter

You have the option of subscribing to our email newsletter on the website, which we use to inform you regularly about the following content:

• Exclusive offers for our newsletter recipients
• Current top offers from our hotels, holiday flats and aparthotels
• Interesting articles about your holiday on the North Sea and Baltic Sea
• Offers from our portfolio,
• Events organised by our company,
• Offers (including events) from third parties, provided you have given your consent.

To receive the newsletter, you must provide the following personal data.

• Recipient (name or pseudonym)
• Valid e-mail address

Registration for our e-mail newsletter is carried out using the double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have provided, in which we ask you to expressly confirm your registration for the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If confirmation is not received within 24 hours, we will block the information sent to us and delete it automatically after one month at the latest.

The following data is also processed at the time of subscription:

• IP address
• Date/time of subscription to the newsletter
• Time of your confirmation of the confirm link
• Newsletter category
• Company name
• Salutation (Mr/Mrs/Family)

We process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and prevent misuse of your personal data. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. We process this data for a period of two years after termination of the contract. If the newsletter registration takes place outside of the conclusion of a contract, we process this data for two years after the end of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the email address and name/pseudonym of the recipient concerned for the purpose of sending our email newsletter. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a) GDPR. We delete this data when you unsubscribe from the newsletter.

You can revoke your consent to the processing of your email address for the purpose of receiving the newsletter at any time, either by sending us a message (see the contact details in the section "Responsible provider/representative of the provider in the European Union") or by clicking directly on the unsubscribe link contained in the newsletter.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this analysis, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are integrated on our website. For the analyses, we link the data mentioned in the "Access data" section and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID.

We use the data obtained to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this. We link this data to actions you have taken on our website. The information is processed for as long as you are subscribed to the newsletter. After you unsubscribe, we process the data purely statistically and anonymously.

Our purpose is to evaluate the use and optimisation of the email advertising that we send you. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

You can object to this tracking at any time by clicking on the separate unsubscribe link provided in each newsletter or by informing us using the contact details provided in the "Controller" section.

You can also prevent tracking by deactivating the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

We use external hosting services to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. All data required for the operation and use of our website is processed.

We use external hosting services for the operation of this website. The purpose of using external hosting services is to ensure the efficient and secure provision of our website. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The collection of data for the provision and use of the website and the processing of data via external web hosts is absolutely necessary for the operation of the website. You can object to the processing. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Third-party content such as videos, maps, RSS feeds or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third-party providers") recognise the IP addresses of the users. Without the IP address, they cannot send the content to the respective user's browser. The IP address is therefore required to display this content.

We endeavour to only use content from third-party providers who only process the IP address to deliver the content. However, we have no influence on whether the third-party providers process the IP addresses, e.g. for statistical purposes. Insofar as we are aware of this, we will inform you of this below.

Some of the third-party providers may process data outside the European Union.

You can object to this by installing a JavaScript blocker such as the browser plugin 'NoScript'(www.noscript.net) or deactivating JavaScript in your browser.

However, this may result in functional restrictions on the website.

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

We use plug-ins on the website from the video platform YouTube.de or YouTube.com, a service operated - represented by Google - by YouTube LLC (head office at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). Using the plug-ins, we can also embed visual content ("videos") that we have published on Youtube.de or Youtube.com on this website.

The videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the following data be transmitted. We have no influence on this data transfer.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under the section "Access data" is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at YouTube and have no influence on it.

You have the right to object to the processing, whereby you must contact YouTube to exercise this right. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Further information on the purpose and scope of processing by YouTube can be found in the privacy policy at https://www.google.de/intl/de/policies/privacy.

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised use of the website. The third-party providers use cookies to control their services (see the "Cookies" section above). Personal data is not processed, unless otherwise explained below.

Some of the third-party providers offer the option of declaring a direct objection to the use of the respective service, e.g. by setting an opt-out cookie.

If you activate a corresponding opt-out cookie, the external provider will no longer process any data on your usage behaviour in future. A merely selective objection to an individual selection of external services is also possible. If you change the browser or the end device used or delete all cookies, you must set the opt-out cookie again.

Furthermore, you can also directly object to the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and opt-out options can also be found at the following link: http://www.youronlinechoices.com/de/.

We will inform you below about the services of external providers currently used on our website as well as about the purpose and scope of the respective processing in individual cases and about your existing options to object.

We use Google Analytics, a web analysis service from Google, to optimise our website to your interests. Google Analytics uses so-called "cookies" (see the "Cookies" section above), which are stored on your computer and enable your use of the website to be analysed. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

If IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity for us and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension "_anonymiseIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of Google Analytics is Art.6 para.1 S. 1 lit. f) GDPR. The Analytics cookies are deleted after fourteen months at the latest.

You have the right to object. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information about the third-party provider Google can be found at

http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy.

We use the technologies of econda GmbH, Zimmerstr. 6, 76137 Karlsruhe, info@econda.de,+49 721 663035-0,(www.econda.de), which collect and store pseudonymised data and create user profiles from this data using pseudonyms, in order to design and optimise this website in line with requirements. Cookies can be used for this purpose, which enable an Internet browser to be recognised. However, user profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor to the website. In particular, IP addresses are made unrecognisable immediately after receipt, which means that it is not possible to assign usage profiles to IP addresses.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at econda and have no influence on it.

You can object to future processing by clicking on the "Send" button under the following link: http://www.econda.de/econda/unternehmen/datenschutz/widerspruchscookie/

Facebook Custom Audiences

Furthermore, the website uses the "Website Custom Audiences" function via the so-called "Facebook pixel" of Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook").

This allows users of the website to be shown interest-based adverts ("Facebook Ads") when they visit the Facebook social network or other websites that also use the process. We are interested in showing you adverts that are of interest to you in order to make our website more interesting for you.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advert from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for the provider to find out and store your IP address and other identifying features.

The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) GDPR. In this case, we do not store any of your personal data. We have no knowledge of the storage period on Facebook and have no influence over it.

The deactivation of the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ to exercise your right to object.

You can prevent the "Facebook Custom Audiences" function in various ways and thus exercise your right to object:

• by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating the interest-based adverts of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choiceswhereby this setting is deleted when you delete your cookies.

Further information on processing by Facebook can be found at https://www.facebook.com/about/privacy.

Facebook Analytics

For the use of Facebook Analytics, we use the so-called "tracking pixel" of Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook") to track your user behaviour. The information obtained by the tracking pixel cookie is used solely for statistical purposes, is transmitted to us anonymously by Facebook and does not provide any information about the user's person. However, it is linked to your Facebook account by Facebook in accordance with its data protection guidelines, stored and used for its own advertising purposes in accordance with Facebook's data usage guidelines, whereby your data may also be transmitted to Facebook's partners. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will find out and store your IP address and other identifying features.

Your data is processed here on the basis of Art. 6 (1) (f) GDPR. By using Facebook Analytics, we are pursuing the interest of being able to better analyse our website and improve our service offering. In this case, we do not store any of your personal data. We have no knowledge of the storage period on Facebook and have no influence over it.

The deactivation of the "Facebook Analytics" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ to exercise their right to object.

You can prevent the "Facebook Analytics" function in various ways and thus exercise your right to object:

• by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating the interest-based adverts of providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choiceswhereby this setting is deleted when you delete your cookies.

For more information on Facebook's privacy policy, please refer to the associated privacy policy at https://de-de.facebook.com/about/privacy/.

Google AdWords Conversion

We use the Google AdWords service from Google to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We are interested in showing you adverts that are of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These adverts are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google AdWords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each AdWords customer. Cookies can therefore not be tracked via the websites of AdWords customers. We ourselves do not process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing of your data is Art. 6 para. 1 S. 1 lit. f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.

You can prevent participation in this tracking process in various ways:

• by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies;
• by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies
• by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org.

Google Remarketing

In addition to Adwords Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. This application allows our adverts to be displayed to you when you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your user behaviour when you visit various websites. This enables Google to recognise your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be processed by Google. In particular, according to Google, pseudonymisation is used for remarketing.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. We have no knowledge of the storage period at Google and have no influence on it.

You can prevent participation in this tracking process in various ways and thus exercise your right to object:

• by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/adswhereby this setting is deleted when you delete your cookies;
• by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choiceswhereby this setting is deleted when you delete your cookies;
• by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin.

Google DoubleClick

We continue to use the online marketing tool "DoubleClick" from Google on the website. DoubleClick uses cookies to display adverts that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts more than once. Google uses a cookie ID - a pseudonymous identification number assigned to your browser - to record which adverts are displayed in which browser and can thus prevent them from being displayed more than once. Information about user activity on the website is assigned to this pseudonym. This enables Google and its partner sites to display adverts based on previous visits to websites. In addition, DoubleClick can use the cookie ID to record so-called conversions that are related to ad requests. For example, if a user sees a DoubleClick advert and later visits the advertiser's website with the same browser and makes a purchase there.

Google transfers the information generated by the DoubleClick cookies to a server in the USA and stores it there. Google complies with the data protection provisions of the EU-US Privacy Shield Agreement and is certified for the "Privacy Shield", https://www.privacyshield.gov/EU-US-Framework. Data is only transferred to third parties within the framework of legal regulations or order processing. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The DoubleClick cookies are deleted after six months at the latest. By using DoubleClick, we are pursuing our interest in showing you adverts that may be of interest to you in order to make our website more interesting for you.

You can prevent participation in this tracking process in various ways and thus exercise your right to object:

• by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any adverts from third-party providers;
• by deactivating cookies for conversion tracking by setting your browser so that cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/adswhereby this setting is deleted when you delete your cookies;
• by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choiceswhereby this setting is deleted when you delete your cookies;
• by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin.

Further information on DoubleClick can be found at https://www.google.de/doubleclick, http://support.google.com, https://policies.google.com/privacy?hl=de (on data protection at Google in general).

Bing Ads

We use the conversion and tracking tool Bing Ads from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, "Microsoft") on our website.

Microsoft stores a cookie on the user's computer to enable us to analyse the use of our online offering. The prerequisite for this is that the user has reached our website via an advert from Microsoft Bing Ads. In this way, Microsoft and we can recognise that someone has clicked on an ad, has been redirected to our website and has reached a predetermined target page. We only learn the total number of users who clicked on a Bing advert and were then forwarded to the target page (conversions). No IP addresses are stored.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Microsoft server. We have no influence on the scope and further processing of the data initiated by the use of Bing Ads. Microsoft has submitted to the EU-US Privacy Shield(https://www.privacyshield.gov/EU-US-Framework) and thus offers a guarantee of compliance with European data protection law.

The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) GDPR. We have no knowledge of the storage period at Microsoft and have no influence on it. Further information on data protection at Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement.

You can object to the processing in various ways:

• by setting your browser software accordingly, in particular the suppression of third-party cookies means that you will not receive any adverts from third-party providers or
• by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choiceswhereby this setting is deleted when you delete your cookies.