1. Introduction and Contact Details of the Data Controller
1.1 Welcome to this website. Below, we inform you about how we handle your personal data when using this website. Personal data refers to any data that can identify you personally.
1.2 The data controller for the processing of personal data on this website in accordance with the General Data Protection Regulation (GDPR) is Anja Lanius-Kastien, Mainzer Str. 38, 55430 Oberwesel, Germany, Tel.: 0171-1035508, Email: ferienwohnung@lanius-knab.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2. Data Collection When Visiting the Website
2.1 When using this website purely for informational purposes, meaning when you do not register or otherwise transmit information, only data that your browser transmits to the web server (so-called “server logfiles”) is collected. When you access this website, the following data, which is technically necessary to display the website to you, is collected:
- Visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you accessed the site
- Browser used
- Operating system used
- IP address used (possibly in anonymized form) The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on the legitimate interest in improving the stability and functionality of this website. There is no transfer or further use of the data. It is reserved to review the server logfiles later if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.
3) Cookies
To make the visit to this website attractive and to enable the use of certain functions, cookies are used. These are small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called “session cookies”), while others remain on your device longer and allow the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.
If personal data is processed by individual cookies, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in case of consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard legitimate interests in ensuring the optimal functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser to inform you when cookies are being set and to decide individually whether to accept them or to exclude the acceptance of cookies for specific cases or in general.
Please note that if cookies are not accepted, the functionality of this website may be limited.
4. Contacting Us
4.1 In the context of contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this.
The legal basis for processing this data is the legitimate interest in responding to your inquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the matter in question has been conclusively clarified, and provided there are no legal retention obligations to the contrary.
5. Data Processing When Opening a Customer Account
In accordance with Art. 6 (1) lit. b GDPR, personal data is collected and processed to the extent necessary when you provide it during the creation of a customer account. The data required for account creation can be found in the input form of the relevant form on this website.
You can delete your customer account at any time by sending a message to the contact address of the data controller mentioned above. After deletion of your customer account, your data will be erased as long as all related contracts have been fully processed, no legal retention periods oppose it, and there is no legitimate interest on the part of the operator to retain the data further.
6. Use of Customer Data for Direct Marketing
Not applicable.
7. Data Processing for Order Fulfillment
Not applicable.
7.1 As far as necessary for contract fulfillment, the personal data collected by us will be forwarded to the assigned bank in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates on services based on a corresponding contract, we process the contact data you provided during the order (name, address, email address) to inform you personally within the statutory time frame on upcoming updates in compliance with our legal obligation to provide information under Art. 6 (1) lit. c GDPR, via suitable communication channels (e.g., by post or email). Your contact details will only be used for the purpose of notifications regarding updates we owe you, and will only be processed by us as far as necessary for the respective communication.
For processing your order, we also work with the service provider(s) listed below, who support us fully or partially in carrying out concluded contracts. Certain personal data will be transferred to these service providers according to the information below.
7.2 Use of Payment Service Providers (Payment Services)
Not applicable.
8. Web Analytics Services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of this website.
By default, when visiting the website, Google (Universal) Analytics sets cookies that are small text files stored on your device and collect certain information. This information includes your IP address, which Google shortens by removing the last digits to exclude direct personal identification.
The information is transmitted to Google servers and processed there. Transfers to Google LLC in the USA are also possible.
Google uses the collected information on behalf of the website operator to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet use. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The data collected through the use of Google (Universal) Analytics will be stored for two months and then deleted.
All of the above processing, particularly setting cookies on the used device, only occurs if you have granted explicit consent in accordance with Art. 6 (1) lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service through the “Cookie-Consent-Tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of the data of these website visitors and prohibits unauthorized disclosure to third parties.
Further legal information regarding Google (Universal) Analytics can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special feature “demographic characteristics” and can create statistics that make statements about the age, gender, and interests of website visitors. This is done by analyzing ads and information from third parties. As a result, target groups for marketing activities can be identified. However, the collected data cannot be attributed to a specific person and will be deleted after being stored for two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR, can analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics.
If you wish to stop cross-device analysis, you can disable the “Personalized Ads” function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
For more information about Google Signals, visit: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension of Google (Universal) Analytics, the “UserIDs” feature may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 (1) lit. a GDPR, created an account on this website, and log in on various devices with that account, your activities, including conversions, can be analyzed cross-device.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
9. Retargeting/Remarketing and Conversion Tracking
Meta Pixel
Within this online offering, we use the “Meta Pixel” service provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).
When a user clicks on an advertisement displayed on Facebook and/or Instagram, the URL of the linked page is extended with a parameter via “Meta Pixel”. This URL parameter is then entered into the user’s browser through a cookie set by the linked page itself.
This allows Meta to identify the visitors of the online offering as a target group for displaying advertisements (so-called “Ads”). Accordingly, we use the service to display Facebook and/or Instagram ads only to users who have shown interest in the online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the websites visited) which we transmit to Meta (so-called “Custom Audiences”).
On the other hand, with “Meta Pixel”, it is possible to track whether users were redirected to this website after clicking on an advertisement and what actions they perform on the website (so-called “Conversion Tracking”).
The collected data is anonymized and therefore does not allow conclusions to be drawn about the identity of the users. However, the data is stored and processed by Meta, making it possible to link the data to the respective user profile, and Meta can use the data for its own advertising purposes.
All of the above-described processes, especially setting cookies for reading information on the device used, will only be carried out if you have explicitly consented to this under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service through the “Cookie-Consent-Tool” provided on the website.
We have entered into a data processing agreement with the provider, which ensures the protection of the data of the website visitors and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; this may also include a transfer to Meta Platforms Inc. servers in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
10. Site Functionalities
10.1 Vimeo
This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.
When you access a page of this website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.
When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not wish to have the data associated with your account, you must log out before clicking the play button.
All of the aforementioned processes, especially setting cookies to read information on the device used, will only occur if you have explicitly consented under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service via the “Cookie-Consent-Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
10.2 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC, USA.
When you access a page of this website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.
When embedded videos are played via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not wish to have the data associated with your account, you must log out before clicking the play button.
All of the aforementioned processes, especially setting cookies to read information on the device used, will only occur if you have explicitly consented under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service via the “Cookie-Consent-Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
10.3 Google Maps
This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. By using this service, the location of the holiday apartment is displayed, and any directions are made easier.
When accessing subpages that include Google Maps, information about your use of this website (such as your IP address) is transmitted to Google’s servers and stored there. This may also involve transmission to servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account you are logged into or if no user account exists. If you are logged into Google, your data is directly associated with your account. If you do not wish for the data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation of data take place according to Art. 6 (1) lit. f GDPR based on Google’s legitimate interest in displaying personalized ads, market research, and/or the demand-oriented design of Google websites. You have the right to object to the creation of such user profiles, but for this, you must contact Google.
If you do not agree with the future transmission of your data to Google as part of using Google Maps, you can also fully deactivate the Google Maps web service by disabling JavaScript in your browser. In this case, Google Maps and thus the map display on this website cannot be used.
To the extent required by law, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the objection method described above.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
Further information on Google’s privacy policies can be found here: Google Privacy
10.4 Google Web Fonts
This site uses so-called web fonts from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to ensure the uniform display of fonts.
When you access a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts and establishes a direct connection to the provider’s servers. During this process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA.
The processing of personal data when connecting to the font provider occurs only if you have explicitly consented to this under Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service via the “Cookie-Consent-Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
Further information on Google’s privacy policies can be found here: Google Privacy
11. Tools and Others
Cookie-Consent-Tool
This website uses a “Cookie-Consent-Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie-Consent-Tool” is displayed to users upon page access as an interactive user interface, where users can grant consent for specific cookies and/or cookie-based applications by ticking checkboxes.
Through this tool, only the cookies/services requiring consent are loaded if the user has given their consent by ticking the box. This ensures that such cookies are only set on the user’s device if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal data is generally not processed.
If personal data (e.g., IP address) is processed for the purpose of storing, assigning, or recording cookie settings, this is done according to Art. 6 (1) lit. f GDPR based on the legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in the lawful design of this website.
Another legal basis for processing is also Art. 6 (1) lit. c GDPR. As the data controller, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have entered into a data processing agreement with the provider, which ensures the protection of the data of website visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings of the Cookie-Consent-Tool can be found directly in the corresponding user interface on this website.
12. Rights of the Data Subject
12.1 The applicable data protection law grants you the following rights concerning the processing of your personal data by the data controller (rights to information and intervention), referring to the specific legal basis for the exercise of these rights:
- Right to access under Art. 15 GDPR;
- Right to rectification under Art. 16 GDPR;
- Right to erasure under Art. 17 GDPR;
- Right to restriction of processing under Art. 18 GDPR;
- Right to notification under Art. 19 GDPR;
- Right to data portability under Art. 20 GDPR;
- Right to withdraw consent under Art. 7 (3) GDPR;
- Right to lodge a complaint under Art. 77 GDPR.
12.2 Right to Object
If we process your personal data based on a legitimate interest of the operator, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
If you exercise your right to object, we will cease processing the affected data. However, further processing may be permitted if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is being processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You may exercise this right as described above.
If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.
13. Duration of Storage of Personal Data
The duration of the storage of personal data depends on the respective legal basis, the purpose of processing, and, if applicable, any statutory retention periods (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent according to Art. 6 (1) lit. a GDPR, the data will be stored until you withdraw your consent.
If there are statutory retention periods for data processed based on contractual or contractual-like obligations under Art. 6 (1) lit. b GDPR, such data will be routinely deleted after the retention period expires, unless they are still required for the fulfillment of the contract or for the initiation of a contract, or if the operator has a legitimate interest in continuing to store them.
When processing personal data based on Art. 6 (1) lit. f GDPR, the data will be stored until you exercise your right to object according to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f GDPR, the data will be stored until you exercise your right to object according to Art. 21 (2) GDPR.
Unless stated otherwise in the other information provided in this statement about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.