Data privacy statement
The responsible entity in the sense of the data protection laws, in particular the EU data protection basic regulation (DSGVO), is: Berchtesgadener Land Tourismus GmbH, Maximilianstrasse 9, 83471 Berchtesgaden, Germany, Tel.: + 49-8652-65650-0, info@bglt.de
Your rights
You can always use the following rights through the contact details of our data protection officer:
- Information about your stored data and their processing (Art. 15 GDPR),
- Correction of incorrect personal data (Art. 16 GDPR),
- Deletion of your stored data (Art. 17 GDPR),
- Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Article 21 GDPR) and
- Data portability, provided you have consented to the processing of data or have concluded a contract with us (Article 20 GDPR).
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can contact a regulatory authority at any time with a complaint, such as to the competent supervisory authority of your country of residence or to the authority that we consider responsible.
A list of the supervisory authorities (for the non-public area) and their corresponding addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collecting general information when visiting our website
Type and purpose of processing:
If you access our website, that is, if you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is only information that does not allow conclusions about your person.
They are processed in particular for the following purposes:
- Ensuring a problem-free connection to the website,
- Ensuring a smooth use of our website,
- Evaluation of system security and stability as well as
- For additional administrative purposes.
We do not use your information to draw conclusions about you. Information of this kind may be statistically evaluated by us to optimize our website and the underlying technology.
Legal basis:
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in improving the stability and functionality of our website.
Receiver:
The recipient of the data may be technical service providers who work on commission for the operation and maintenance of our website.
Storage time:
The data will be deleted as soon as it is no longer necessary for the purpose of the survey. This is basically the case for the data that is used for the Bereitstellung of the website once the session has ended.
Provision mandatory or required:
The provision of the aforementioned personal data is neither legally nor contractually required. Without the IP address, however, the service and functionality of our website is not guaranteed. Additionally, individual services may not be available or limited. For this reason, a contradiction is excluded.
Newsletter
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. This requires the specification of a valid e-mail address and your name. This serves for the assignment of the request and the subsequent answering of the same. The specification of further data is optional. To receive the newsletter your supplying your Email address suffices. In order to receive our newsletter the data you provide is used solely for the service. In some cases subscribers may be emailed information that might be relevant for the service or for the registration (for example changes to the newsletter offer or technical aspects).
For a successful registration we require a valid email address. In order to check if a registration has been carried out by a party owning an email address, we use the “double op-in” process. We then protocol the newsletter order, send a confirmation email and the reception of the requested reply. No additional data is requested. The data is used solely for the sending of the newsletter and is not passed on to third parties.
Legal basis:
Based on your express agreement (Art. 6 (1) (f) GDPR) we send you our newsletter on a regular basis and similar information by email via the email address you have provided. The agreement to store your personal data and its use for the sending of the newsletter can be revoked for the future. Every newsletter contains the corresponding link. At any time you can use the website to unsubscribe or express your objection by using the contact details at the end of this data privacy statement.
Receiver:
The recipient of the data may be a processor.
Storage time:
The data will be used only as long as the agreement lasts. Following that time, it will be deleted.
Provision mandatory or required:
The provision of your personal data is voluntary. Without a valid consent, we cannot send you our newsletter.
Contact form
Type and purpose of processing:
The data you provide is stored for individual communication with you. To this effect an valid email address and your name are required. This is used to classify the request and for the subsequent reply. The provision of additional data is optional.
Legal basis:
The processing of the data provided in the contact form is carried out on the basis of a justified interest (Article 6, (1) DSGVO).
By providing a contact form we attempt to offer you an uncomplicated way of providing contact details. Your details will be stored only to be used to process the request and to answer possible questions you may have.
If you contact us to request an offer the processing of the contact form’s data underlies pre-contractual measures (Article 6 (1) DSGVO).
Receiver:
The recipient of the data may be a processor.
Storage time:
Data will be deleted no later than 6 months after processing the request.
If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these deadlines.
Provision mandatory or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request
Use of Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereafter: "Google"). Google Analytics uses so-called "cookies", i.e. text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
The purposes of the data processing are the evaluation of the use of the website and the compilation of reports on activities on the website. Based on the use of the website and the Internet, other related services will be provided.
Legal basis:
The processing of the data is based on the consent of the user (Article 6 (1) (a) GDPR).
Receiver:
The recipient of the data is Google as a processor. For this we have with Google completed the corresponding order processing contract.
Storage time:
The deletion of data takes place as soon as they are no longer necessary for our recording purposes.
Third country transfer:
Google processes your data in the US and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. We also have standard privacy clauses with Google for the use of Google Analytics.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent:
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: Browser Add On to disable Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages. An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
Profiling:
With the help of the tracking tool Google Analytics the behavior of the visitors of the website can be evaluated and the interests analyzed. For this we create a pseudonymous user profile.
Using Adobe Analytics (Omniture)
Type and purpose of processing:
This website uses Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Companies (hereafter "Adobe"), 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe Analytics uses so-called "cookies", ie text files that are stored on your computer and that allow an analysis of the use of the website by you. If a tracking record is sent to the Adobe Datacenter by a browser of a webpage visitor, then the server setting made by us ensures that the IP address is anonymized prior to geolocation, i. E. that the last octet of the IP address is replaced by zeros. Before the tracking packet is saved, the IP address is replaced by individual generic IP addresses.
On behalf of the operator of this website, Adobe will use this information to evaluate users' use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address sent by your browser as part of Adobe Analytics will not be merged with any other data from Adobe.
Adobe's applicable privacy policy can be found at http://www.adobe.com/privacy.html
Legal basis:
The processing of the data is based on the consent of the user (Article 6 (1) (a) GDPR).
Receiver:
The recipient of the data is Adobe as a processor.
Storage time:
The deletion of data takes place as soon as they are no longer necessary for our recording purposes.
Third country transfer:
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent:
You can prevent the storage of cookies by a corresponding setting of your browser software. However, this offer notifies users that you may not be able to use all features of this website in their entirety. In addition, users may prevent the collection by Adobe of the data generated by the cookie and related to its use of the website (including your IP address) and the processing of such data by Adobe using the browser plug-in available at the following link Download and install: https://www.adobe.com/privacy/opt-out.html
Profiling:
The tracking tool Adobe Analytics (Omniture) is used to improve the design and usability of our website and to optimize the booking process. For this we create a pseudonymous user profile.
Using Script Libraries (Google Webfonts)
Type and purpose of processing:
To make our content accurate and graphically appealing across browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter "Google") to display fonts.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).
Receiver:
The call of script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - but currently also unclear whether and if so for what purposes - that the operator in this case, Google collects data.
Storage time:
We do not collect personal information through the inclusion of Google Webfonts.
More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/
Third country transfer:
Google processes your data in the US and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US Framework.
Provision mandatory or required:
The provision of personal data is neither statutory nor contractually required. However, without the correct representation of the contents of standard fonts cannot be made possible.
Withdrawal of consent:
For the presentation of the contents the programming language JavaScript is used regularly. You can therefore object to data processing by disabling the execution of JavaScript in your browser or installing a JavaScript Blocker incorporation. Please note that this may result in functional restrictions on the website.
Using Adobe Typekit
Type and purpose of processing:
We use Adobe Typekit for the visual design of our website. Typekit is a service of Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, hereinafter "Adobe"), which grants us access to a font library. To integrate the fonts we use, your browser needs to connect to an Adobe server in the US and download the font we need for our website. Adobe receives the information that your website has been called from your IP address. For more information about Adobe Typekit, see the Adobe privacy policy, which can be found here: https://www.adobe.com/privacy/policy.html
Legal basis:
The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 (1) lit. DSGVO).
Receiver:
The call of script libraries or font libraries automatically triggers a connection to the operator of the library. Information about the use of your data by Adobe Typekit Web Fonts is available at https://typekit.com/ and in the Adobe Typekit privacy policy: https://www.adobe.com/privacy/policies/typekit.html
Storage time:
We do not collect personal information through the inclusion of Adobe Typekit Web Fonts.
Third country transfer:
Adobe is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active)
Provision mandatory or required:
The provision of personal data is neither statutory nor contractually required. However, without the correct representation of the contents of standard fonts cannot be made possible.
Using Google Maps
Type and purpose of processing:
On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter "Google"). This allows us to show you interactive maps directly on the website, allowing you to conveniently use the map feature.
For more information about Google's data processing, please refer to the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.
For detailed instructions on how to manage your own data related to Google products, click here.
Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Article 6 (1) a DSGVO).
Receiver:
By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account.
If you do not wish to be assigned to Google on your profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (even for non-logged in users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the formation of these user profiles, and you must comply with this to Google.
Storage time:
We do not collect personal information through the inclusion of Google Maps.
Third country transfer:
Google processes your data in the US and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not want Google to collect, process or use information about you through our website, you can disable JavaScript in your browser settings. In this case, you can not or only partially use our website.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
Embedded YouTube videos
Type and purpose of processing:
On some of our websites, we embed YouTube videos. The respective plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). When you visit a page with the YouTube plug-in, it will connect to YouTube's servers. It tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube may personally associate your browsing behavior with you. This can be prevented by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behavior.
For more information on the purpose and scope of your data collection and processing through YouTube, please refer to the provider's privacy policy, where you can also find out more about your rights and preferences for privacy (https://policies.google.com/privacy). , Google processes your data in the US and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).
Receiver:
Connecting to YouTube automatically triggers a connection to Google.
Duration of storage and withdrawal of consent:
Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.
For more information about data protection at "YouTube", please see the provider's privacy policy at: https://www.google.com/intl/en/policies/privacy/
Third country transfer:
Google processes your data in the US and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
Social plugins
Type and purpose of processing:
We offer you the possibility of using so-called "social media buttons" on our website. To protect your data, we rely on the solution "Shariff" in the implementation. As a result, these buttons are integrated on the website only as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic you will be redirected to the services of the respective provider. Only then will your data be sent to the respective provider. Unless you click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the respective providers. More information about the Shariff solution can be found here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
We have integrated the social media buttons of the following companies on our website: Facebook, Google+
Google AdWords
Type and purpose of processing:
Our website uses Google Conversion Tracking. Google AdWords Services is the Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement sent by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google-served ad.
If the user visits certain pages on our website and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords advertisers' websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).
Receiver:
Whenever you visit our website, your personal information, including your IP address, is transferred to Google in the United States. This personal information is stored by Google. Google may transfer such personal data collected through the technical process to third parties.
Our company does not provide information from Google that could identify the data subject.
Storage time:
These cookies lose their validity after 30 days and are not used for personal identification.
Third country transfer:
Google processes your data in the US and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Withdrawal of consent:
If you do not want to participate in the tracking, you can refuse the required setting of a cookie - for example via a browser setting that generally disables the automatic setting of cookies or sets your browser to block cookies from the domain "googleleadservices.com".
Please note that you can not delete the opt-out cookies as long as you do not want to record measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
Use of Google Remarketing
Type and purpose of processing:
This website uses the remarketing function of Google Inc. The Google Remarketing Services company is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (hereafter "Google").
The feature is designed to present interest-based ads to web page visitors within the Google Network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when he or she visits websites that belong to the advertising network of Google. On these pages, visitors may be presented with ads related to content that the visitor previously viewed on web pages using Google's remarketing feature.
Legal basis:
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Article 6 (1) (a) GDPR).
Receiver:
Whenever you visit our website, your personal information, including your IP address, is transferred to Google in the United States. This personal information is stored by Google. Google may transfer such personal data collected through the technical process to third parties.
Our company does not provide information from Google that could identify the data subject.
Withdrawal of consent:
Google says it does not collect any personal information during this process. However, if you still do not want Google's Remarketing feature, you can always disable it by completing the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising through the Network Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp .
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unless you prevent access, this may result in functional restrictions on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.
Used processors
The following organizations, companies or persons were commissioned by the operator of this website to process data:
makrohaus AG
eyepin GmbH
IRS - Region 18 e. V.
Systemhaus RCE GmbH
Mikadodirekt
Futura Marketing GmbH
Outdooractive GmbH & Co. KG
Change of our privacy policy
We reserve the right to amend this privacy policy to always comply with the latest legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your new visit will be subject to the new privacy policy.
Questions to the data security officer
If you have any questions about data security, please send us an e-mail or contact our data security officer directly:
Michael Weiß, LL.M.
activeMind AG Technology and Management Consulting
datenschutz@bglt.de
The privacy policy has been created with the privacy statement generator of activeMind AG (version 2018-06-22) and was translated in part with google translator.