Privacy Policy


Privacy Policy


This privacy policy clarifies the nature, scope and purpose of the processing of personal information (hereafter "Data"). ) in the context of the rendering of our services as well as within our on-line offer and the web pages connected thereto, functions and contents as well as external on-line presences, like eg our Social Media Profile (collectively referred to as the "Online Offering"). With regard to the terminology used, e.g. "Processing" or "Responsible" we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).


person in charge

Holiday house Landskrone
Thomas Büttner
Kesselsdorfer Strasse 202
01169 Dresden Tel .: +491751627517
E-Mail: t.buettner@tom-buettner.de


Types of processed data

- Inventory data (eg, persons Master data, names or addresses).
- Contact details (e.g., e-mail, phone numbers).
- content data (e.g., text input, photographs, videos).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta / communication data (eg, device information, IP addresses).


Categories of affected persons

Visitors and users of the online offer (below In summary, we also refer to the data subjects as "users").


Purpose of Processing

- Providing the online offer, its features and content.
- Answering contact requests and communicating with users.
- Safety measures
. - Audience measurement / Marketing |


Terms Used

"Personal Information" is any information that identifies itself to an identified person or identifiable natural person (hereinafter referred to as "affected person"); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

"Processing" means any process performed with or without the aid of automated procedures, or any such process associated with personal data. The term goes far and includes virtually every way you deal with data
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

"Profiling" means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal Analyze or predict preferences, interests, reliability, behavior, location or location of this natural person.

"Responsible person" means the natural or legal person, public authority, agency or other body that decides, alone or together with others, the purposes and means of processing personal data
'Processor' means a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.


Security Measures

We will comply with legal requirements, taking into account the state of the art, implementation costs and nature, scope, circumstances and conditions The purposes of the processing and the different likelihood and severity of the risk to the rights and freedoms of natural persons; appropriate technical and organizational measures to ensure a level of protection commensurate with the risk.

Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and disconnection. In addition, we have established procedures to ensure the enjoyment of data subject rights, the erasure of data and the response to data compromise. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection through technology design and privacy-friendly default settings

Collaboration with contract processors, joint controllers and third parties

Provided that we process data to other persons and companies (contract processors, co-controllers or third parties ), convey them to them or otherwise grant them access to the data, this is done only on the basis of a legal permission (eg, if a transmission of the data to third parties, as to payment service providers, is required to fulfill the contract), users have consented to a legal Obligation this provides or based on our legitimate interests (eg in the use of agents, web hosts, etc.).

Insofar as we disclose data to other companies in our group, convey it or otherwise grant access to it, this is done in particular for administrative purposes as a legitimate interest and, moreover, on a basis that complies with the legal requirements.

Transfers to third countries

If we have data in a third country (ie outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or in the context of the use of third-party services or disclosure, or transmission of data to other persons or companies, this only occurs if it to fulfill our (pre) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests. Subject to express consent or contractually required transmission, we process or disclose the data only in third countries with a recognized level of privacy, including those certified under the Privacy Shield, or on the basis of specific warranties, such as limited liability. contractual obligation by so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection rules (Art. 44 to 49 GDPR, EU Commission information page )

Rights of data subjects < / h3>

You have the right to ask for confirmation as to whether the data in question is processed and for information about this data and for further information and copy of the data in accordance with the legal requirements.

You have accordingly. the legal requirement to request the completion of the data concerning you or the correction of the incorrect data concerning you.

They have according to thelegal requirements the right to demand that the relevant data be deleted immediately, or alternatively, in accordance with the statutory requirements to require a limitation of the processing of the data
You have the right to request that the data relating to you provided to us be obtained in accordance with the statutory requirements and to request their transmission to other persons responsible.

You also have the right, in accordance with legal requirements, to file a complaint with the competent supervisory authority.

Withdrawal

You have the right to revoke granted consent with effect for the future.


Right to object

You may object to the future processing of your data in accordance with legal requirements at any time. The objection may in particular be made against processing for purposes of direct mail.


Cookies and right of objection for direct mail

As "cookies" refers to small files that are stored on users' computers. Different information can be stored within the cookies. A cookie serves primarily to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart are stored in an online shop or a login status. "Persistent" or "persistent" refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A "third-party cookie" means a cookie that is offered by providers other than the person who runs the online offer (otherwise, if it is only their cookies, this is called "first-party cookies")
We can use temporary and permanent cookies and clarify this in the context of our privacy policy.

Insofar as we ask users for consent to the use of cookies (for example, in the context of a cookie consent), the legal basis of this processing is Article 6 (1) lit. a. DSGVO. Otherwise, the personal cookies of the users according to the following explanations in the context of this Privacy Policy on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para 1 lit. DSGVO) or if the use of cookies to provide our contractual services is required, in accordance with Art. Art. 6 para. 1 lit. b. DSGVO, or if the use of cookies is required for the performance of a task that is in the public interest or in the exercise of official authority, in accordance with. Art. 6 para. 1 lit. e. DSGVO, processed.

If users do not want cookies stored on their machine, they will be asked to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

A general contradiction to the use of cookies used for online marketing purposes can be found on the US side of a large number of services, especially in the case of tracking http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/ be explained. Furthermore, the storage of cookies can be achieved by switching them off in the settings of the browser. Please note that you may not be able to use all features of this online offer.

Deleting Data

The data processed by us will be processed as specified legal requirements are deleted or restricted in their processing. Unless explicitly stated in this privacy statement, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements.

Unless the data is deleted because it is used for other legitimate purposes. Erequired, their processing is restricted. That the data is blocked and not processed for other purposes. This applies, for example for data that needs to be retained for commercial or tax reasons.

Changes and Updates to the Privacy Policy

We ask for your content regularly to inform our privacy policy. We will adjust the privacy policy as soon as the changes to the data processing we make require it. We will inform you as soon as the changes require your participation (eg consent) or other individual notification.


Business-Related Processing

Additionally, we process
- Contract data (e.g., contract, term, customer category).
- Payment data (e.g., bank details, payment history)
by our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research. Created with Datenschutz-Generator.de by RA Dr. med. Thomas Schwenke