PriVacy Policy

Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Jens Kunath

c/o orangemedia.de GmbH & Co. KG

Stresemannstraße 29

22769 Hamburg

Telephone: +49 40 809 081 322

Note on data security

We use the SSL (Secure Socket Layer) process on our website in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit technology instead. You can tell whether an individual page of our website is being transmitted encrypted by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

Server statistics

When you visit our website, we log the following data that your browser transmits:

IP address of the user’s Internet service provider Date and time of the request Time zone difference to Greenwich Mean Time (GMT) Content of the request (specific page)

Access status/HTTP status code Amount of data transferred in each case

 Website from which the request comes

Website that is subsequently visited

Browser

Language and version of the browser software

Operating system and its interface

The data is also stored in the log files of our system.

The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 lit. f GDPR.

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. This also justifies our legitimate interest in the process. The logging is carried out for the internal evaluation of our offer, to optimize the display of our website and to identify and prevent misuse. The stored data is not merged with other data sources or used for marketing purposes.

For these purposes, our legitimate interest in data processing in accordance with Art. 6

Paragraph 1 lit. F GDPR also lies.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection to provide the website, this is the case when the respective session has ended.

For the storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users‘ IP addresses are deleted or alienated so that it is no longer possible to assign the calling client.

The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no option to object.

 

Booking request

There is a contact form on our website that can be used to make a booking request. If a user takes advantage of this option, the data entered in the input mask is sent to us and stored. In addition to the user’s stated request, this data includes:

Salutation

Name

Email address

Information about the associated company (partly optional)

First name (optional)

Telephone number (optional)

City and postcode (optional)

The following data is also stored at the time the message is sent:

IP address

Date and time of entry

In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation. The data is processed with the intended purpose in mind as part of the initiation or implementation of a contractual relationship, Art. 6 Para. 1 lit. b GDPR. Furthermore,

processing may take place within the scope of our legitimate interests, Art. 6 Para. 1 lit. f GDPR – our legitimate interest here is in providing an uncomplicated way of contacting potential interested parties in our services. Our legitimate interests may, for example, also lie in the internal forwarding of the request to enable another employee to answer it or in similar organizational measures to make work easier. This does not include

surprising or excessive processing processes that are detrimental to the sender.

The data from the input mask is collected solely for the purpose of processing your request and to provide information about our services. Your data will not be passed on or used for other purposes.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also our legitimate interest in this processing process in accordance with Art. 6 Paragraph 1 Letter f of GDPR.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended and no transfer to our customer database has taken place. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user can object to the storage of his personal data at any time. All you need to do is send an informal email to our data protection officer (see address above) stating the data required to assign the contact. In such a case,

the conversation cannot be continued. All personal data that was saved during the contact process will be deleted in this case, unless it is required for further legal protection.

 

Own cookies

This website uses cookies. A „cookie“ is text information that the website visit places on the viewer’s computer via the web browser, where it can later be read again by the web browser.

Cookies can store information about details that you provide when visiting the website – for example, the language selection, entries in form fields, etc. Cookies can also store a unique identifier that allows your browser to be recognized by the website.

We ourselves use both session cookies (which are automatically deleted when the browser is closed) and persistent cookies (which remain on your computer until the set expiry date) on this site.

In addition, third-party services are integrated into this website, which can also store cookies on your computer. For the integrated services, see below.

Cookies are set on the basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, whereby our legitimate interest lies in providing a functional and user-friendly website, answering customer inquiries and optimizing our web offering.

We use the personal data collected with the help of cookies to optimize the information and offers on our website for you by optimizing the navigation of the site from a technical point of view, e.g. by allowing you to save your settings for your next visit or features such as recognizing a closed session to enable a login or a shopping cart, etc.

The user data collected by the cookies is not used to create user profiles.

Session cookies set by us are deleted when the browser is closed, persistent cookies set by us are deleted after the set expiry date.

You can prevent cookies from being set by our website at any time by making the appropriate settings in the internet browser you are using, thereby permanently denying the setting of cookies. As a user, you therefore have full control over the use of cookies. Furthermore, cookies that have already been set can be deleted at any time using an internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the internet browser you are using, not all functions of our website may be fully usable. Google Web Fonts This site uses so-called web fonts provided by Google to uniformly display fonts. If you have previously needed the web fonts on another site and downloaded them from the Google CDN, your browser will use the copy stored in the cache. If this is not the case, your browser will download the web fonts itself. This tells Google that our website was accessed via your IP address. A transfer of this data to the USA cannot be ruled out. Google is verified under the EU-US Privacy Shield, for which an adequacy decision has been made by the EU Commission.

 

The use of Google Web

Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f of GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

You can find more information about Google Web Fonts at:

https://developers.google.com/fonts/faq

and in Google’s privacy policy:

https://www.google.com/policies/privacy/

 

No automated decision-making

We would like to point out that when using our services and making use of our services/services, you will not be subjected to a decision based exclusively on automated processing – including profiling – that has legal consequences for you or significantly affects you in a similar way.

 

Your rights

You can request information about processing operations relating to your personal data. In addition, you have the right to request correction, restriction of processing, portability and/or deletion of your personal data. If you have asserted your

right to deletion, restriction of processing or correction, you can also request that the recipients of your data be informed accordingly.

 

You can also complain to a supervisory authority about processing operations

and object to the processing of your personal data.

 

June 2024