Data Protection Policy

How we process your data

Pursuant to Article 12 of the General Data Protection Regulation (GDPR), we are obliged to tell you how we process your data when you use our website. We take the protection of your personal data very seriously, and this Data Protection Policy is intended to provide you with details of how your data are processed and your statutory rights in this connection.
We reserve the right to amend the Data Protection Policy with future effect, in particular if the website is updated, if new technologies are deployed, if the legislative basis is amended or if relevant decisions are handed down by the courts.
We encourage you to review the Data Protection Policy from time to time and to keep a print-out or copy with your records.

Definitions

• "Website" means all of the controller's webpages hosted on the domain https://www.bookiply.de.
• "Personal data" means any information relating to an identified or identifiable natural person ("data sub-ject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data therefore include a person's name, email address and tele-phone number, but also data about his or her preferences, hobbies and memberships.
• "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structur-ing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemina-tion or otherwise making available, alignment or combination, restriction, erasure or destruction.
• "Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
• "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
• "Google" means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; contact ad-dress in the European Union: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope

The Data Protection Policy applies to all webpages hosted on the domain https://www.bookiply.de. It does not apply to any linked websites provided by other companies.

Controller

The controller responsible for processing personal data within the scope of this Data Protection Policy is as fol-lows:
Bookiply GmbH
Riesstraße 24
80992 Munich
kontakt@bookiply.com

Questions concerning data protection

If you have any questions concerning data protection in relation to our company or our website, please contact our Data Protection Officer:
Dominik Fünkner
Proliance GmbH
Leopoldstraße 21
80802 Munich
datenschutzbeauftragter@datenschutzexperte.de
www.datenschutzexperte.de

Security

We take extensive technical and organisational precautions to protect your personal data against unauthorised access, misuse, loss and other external interference. We review our security measures on a regular basis and en-sure that they reflect the state of the art.

Your rights

You are entitled to exercise the following rights in respect of your personal data:
• right of access (Article 15 GDPR),
• right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR),
• right to restriction of processing (Article 18 GDPR),
• right to object (Article 21 GDPR),
• right to withdraw consent (Article 7(3) GDPR),
• right to receive data in a structured, commonly used and machine-readable format ("data portability") and right to transmit data to another controller provided the requirements laid out in Article 20(1)(a) and (b) GDPR are met (Article 20 GDPR)
You can exercise these rights by contacting us using the contact details provided above in the section entitled "Con-troller", or by contacting our appointed Data Protection Officer.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Article 77 GDPR).

Use of the website, access data

In general terms, you can use our website for purely informative purposes without disclosing your identity. When you visit the individual pages of our website, access data are transferred to our webspace provider, but these data are only processed for the purpose of displaying our website to you. They include:
• browser type/version
• operating system used
• browser software language and version
• host name of the end device accessing the website
• IP address
• requesting website
• content of the request (specific page)
• date and time of the server request
• access status/HTTP status code
• referrer URL (last page visited)
• quantity of data transferred
• time zone difference to Greenwich Mean Time (GMT)
Temporary processing of your IP address by the system for the duration of the session is necessary to ensure that the technical prerequisites are met for delivery of the website to your computer. The legal basis for this processing is Article 6(1)(f) GDPR.
Access data are not used to identify individual users and are not combined with data from other sources. They are erased when they are no longer required to achieve the purpose of processing. If data are collected for the pur-pose of providing the website, they will therefore be erased when you leave the website.
IP addresses are stored in log files to guarantee the functionality of the website. Access data are also used to opti-mise the website and protect our information technology systems. They are not evaluated for marketing purposes. Generally speaking, they are erased after a period lasting no longer than seven days; in individual cases, however, they may be processed after this period has expired. In such cases the IP address will be deleted or encrypted in such a way that it is no longer possible to assign it to the original client.
It is absolutely vital for us to collect data on the provision of the website and to process log file data in order to operate our website. You have the right to object to processing of this kind. In the event that your objection is legit-imate, we will review the situation and either stop processing the data, change how we process the data or notify you if there are compelling legitimate grounds for us to continue processing the data.

Cookies

In addition to the access data referred to above, cookies are also stored in the web browser of the end device you use to visit our website. Cookies are small text files containing a sequence of characters which are stored locally in the cache of the browser you use. Cookies do not form part of the PC system and cannot execute programs. Their purpose is to make our website more user-friendly. It may be necessary to use cookies for technical reasons or other purposes (e.g. analysis/evaluation of website usage).

a) cookies which are necessary for technical reasons
Certain parts of our website require the visiting browser to be identifiable even after moving to a different page. Cookies are used to process the following data in this connection:
• language settings
• log-in details
The user data collected by cookies which are necessary for technical reasons are not used to create user profiles. We also use session cookies, which store a session ID that assigns your browser's requests to the relevant session. Session cookies play a vital role in the delivery of our website. In particular, they allow us to recognise your end device when you return to our website. We use session cookies to recognise follow-up visits to our website by users who hold an account with us, and to avoid them needing to log in again every time. The legal basis for pro-cessing of this kind is Article 6(1)(f) GDPR. The purpose of session cookies is therefore to make it easier and more convenient for you to use our website. They are deleted as soon as you log out or close your browser.
The default setting for most browsers is to accept cookies automatically. You can object to cookies being used to process your data. You can disable or restrict the transfer of cookies by changing the settings in your web browser. Cookies which have previously been stored can be deleted at any time. You can also arrange for this to take place automatically. If you disable the use of cookies on our website, it may no longer be fully functional.
Any third-party cookies we integrate into our website are referred to separately below.

b) Flash cookies
HTML5 storage objects are also stored on your end device by our website ("Flash cookies"). These objects process the relevant data separately from the browser, and have no automatic expiry date. The legal basis for processing of this kind is Article 6(1)(f) GDPR. These cookies are used to make it easier and more convenient for you to use our website.
You can object to cookies being used to process your data. The transfer of Flash cookies must be prevented by changing the settings of the Flash Player rather than by changing the browser settings. If you wish to disable the use of Flash cookies, you can install an appropriate add-on for the browser you use, e.g. "Better Privacy" for Mozil-la Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/).
You can also prevent the use of Flash cookies by opening your browser in private browsing mode. Lastly, you can ensure that your cookies and browser history are deleted manually on a regular basis.

Contacting our company

When you make contact with our company, e.g. via email or the contact form on the website, we process the per-sonal data you provide in order to respond to your request.
In order for us to handle requests submitted via the contact form on our website, we need a name or pseudonym, a valid email address and a telephone number. The following data are also processed when the message is submit-ted:
• IP address
• date/time of submission
The legal basis for processing of this kind is Article 6(1)(f) GDPR or Article 6(1)(b) GDPR if contact is made with the aim of concluding a contract.
We process the personal data provided via the contact form solely in order to handle the request for contact. In the event that such a request is submitted via email, this too constitutes the necessary legitimate ground for processing the data. The other personal data processed when the contact form is submitted are used to prevent misuse of this form and to protect our information technology systems.
No data are transferred to third parties, regardless of whether contact is made via email or the contact form. The data are used exclusively to communicate with you. The data generated in this connection are erased once it is no longer necessary to process them; alternatively, the processing of these data is restricted in so far as possible in view of the mandatory retention periods.
You can object at any time to the processing of your personal data in connection with contact requests. This applies in particular if the processing of your data is no longer necessary to execute a contract with you, as explained pre-viously. It may no longer be possible to continue handling your contact request in such cases. In the event that your objection is legitimate, we will review the situation and either stop processing the data, change how we pro-cess the data or notify you if there are compelling legitimate grounds for us to continue processing the data.

Processing and transfer of personal data for contractual purposes

We process your personal data if and to the extent that this is necessary to initiate, establish, execute and/or ter-minate legal relations with our company. The legal basis for processing of this kind is Article 6(1)(b) GDPR.
Once the relevant purpose has been achieved (e.g. the contract has been executed), the personal data will be blocked or erased rather than processed further unless we have obtained consent from you (e.g. consent to the processing of your email address for the sending of advertising emails), a contractual agreement exists, a statutory authorisation exists (e.g. authorisation to carry out direct advertising), or we have a legitimate interest (e.g. storage with a view to the later enforcement of claims) in continuing to store the data and are entitled to process them in so far as necessary in the relevant context.
We will transfer your personal data in the event that:
• such transfers are necessary for the establishment, execution or termination of legal relations with our company (e.g. in cases where data are transferred to a payment service provider/shipping company in order to execute a contract we have concluded with you) (Article 6(1)(b) GDPR), or
• the data are required by a subcontractor or vicarious agent engaged solely for the purpose of providing the services or products you have requested (unless you are expressly notified otherwise, such parties are only entitled to process the data in so far as necessary to provide the service or product), or
• an enforceable official order exists (Article 6(1)(c) GDPR) or
• an enforceable court order exists (Article 6(1)(c) GDPR) or
• a legal obligation exists (Article 6(1)(c) GDPR), or
• processing of the data is necessary to protect the vital interests of the data subject or another natural per-son (Article 6(1)(d) GDPR), or
• we are entitled or even obliged to transfer data in order to pursue our overriding legitimate interests (Ar-ticle 6(1)(f) GDPR).
We will not otherwise transfer your personal data to other individuals, companies or authorities unless you have expressly consented thereto. The legal basis for processing of this kind is Article 6(1)(a) GDPR.

Registration/password-protected area of the website

If you wish to use the password-protected area of our website, you will need to register and provide the following information:
• email address,
• name
• password (which you can choose yourself)
• billing address
• bank account details
• VAT ID
The following data are also processed at the time of registration:
• IP address
• date/time of registration
• bank account details
These data are erased as soon as they are no longer required to achieve the purpose of processing. This will apply to the data collected during registration when your registration on the website is cancelled or modified.
In the password-protected area, you can do the following:
• edit profile data
• view past orders/bookings
• edit profile data for holiday properties
If you use the password-protected area of our website, e.g. to edit your profile data or view past orders and book-ings, we will also process the personal data necessary to initiate or execute a contract, in particular address data and details of payment method. The legal basis for processing of this kind is Article 6(1)(b) GDPR. These data are erased as soon as they are no longer required to achieve the purpose of processing, provided that there are no legitimate interests preventing their erasure. Mandatory provisions of commercial and tax law oblige us to to re-tain your address, payment and order details for a period of 10 years. Two years after the contract has expired, we restrict the processing of the data to the minimum required to comply with the statutory obligations.
If you voluntarily provide us with other data (e.g. your interests, size, age, sex, children, preferences, wishlist), we will process any data not necessary to initiate or execute a contract for as long as you continue to use the pass-word-protected area, provided you do not erase them yourself. Our aim in processing data in this way is to opti-mise the user experience for you as a visitor to our website. The legal basis for processing of this kind is Arti-cle 6(1)(f) GDPR.
You can object to the processing of data you have provided voluntarily. You can manage, modify or erase the data you have provided voluntarily at any time in the password-protected area. You are entitled to exercise the rights explained in the section entitled "Your rights"; however, we ask you to contact our company first in the event that you have a complaint.

Email marketing

Advertising to existing customers

Unless you have objected to your email address being processed for this purpose, we reserve the right to process the email address provided by you upon registration in accordance with the statutory provisions, during or after execution of the contract, in order to email you content on subjects such as the following:
• events organised by our company,
• technical information,
• news/market developments in the (local) holiday lettings industry
The legal basis for processing of this kind is Article 6(1)(f) GDPR. We process data in this way as a convenience for our customers and in order to improve the service we provide. We erase your data if you unsubscribe to the newsletter, and no later than two years after termination of the contract.
You can object to receiving direct advertising at any time without incurring any expenses other than the basic rate cost of sending the message. In order to do so, click on the unsubscribe link in the newsletter or forward your objection to the contact address provided in the section above entitled "Controller".

Email marketing service "MailChimp"

We use the email marketing service "MailChimp" provided by the Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, website: https://mailchimp.com/; hereinafter: "MailChimp").
Data provided upon registration are stored and processed on MailChimp's servers in the USA for the purpose of advertising to existing customers. MailChimp processes these data in order to send out and evaluate newsletters on our behalf. MailChimp newsletters contain "web beacons", which are pixel-sized files downloaded from the MailChimp server when the newsletter is opened. Technical data (such as the browser being used, the time at which the page is visited and the IP address) are collected as part of this process. These data are processed as a basis for evaluating and making technical improvements to the service we provide, as well as for determining whether newsletters are opened, when they are opened and which links are clicked on by readers. In theory, these data can be assigned to individual newsletter recipients. In practice, however, neither we nor MailChimp are interested in monitoring individual recipients; instead, the data are evaluated in order to find out more about recipients' reading habits so that we can adapt and better target the content of advertising for our existing custom-ers. The legal basis for processing of this kind is Article 6(1)(f) GDPR. We do not know and cannot influence the length of time for which these data are stored by MailChimp.
You can object to the processing at any time with future effect by clicking on the unsubscribe link at the bottom of the newsletter. Your data will no longer be processed by MailChimp for the purpose of sending you the newsletter or carrying out statistical evaluations. It is not possible to object to one of these activities alone.
Alternatively, you can exercise your right to object at http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (in the European Union).
According to MailChimp, the company may also use the data transferred for the purpose of optimising and im-proving its own services, e.g. technical improvements to the way in which newsletters are sent and displayed. The company states that it does not process the data for the purpose of advertising directly on its own behalf, and that it does not transfer the data to third parties.
As an existing customer at whom advertising is targeted, you may be taken to the MailChimp website in certain cases, for example if you click on the link in the newsletter to download the newsletter directly because it is not displaying properly in your email client. The MailChimp website may use additional analytics services and cookies to process your personal data. We have no influence over processing of this kind.
MailChimp is certified in accordance with the US-EU Privacy Shield agreement, and has therefore undertaken to comply with the European Union's data protection regulations. Further details can be obtained by visiting the MailChimp website at: https://mailchimp.com/legal/privacy/.

Hosting

External hosting companies provide the following services on our behalf: infrastructure and platform services, computing capacity, memory resources and database services, security and technical maintenance services. All of the data necessary to operate and use our website are processed in this connection.
We use external hosting services in order to operate this website, and in order to guarantee efficient and secure delivery of our website. The legal basis for processing of this kind is Article 6(1)(f) GDPR.
In order for us to operate our website, it is absolutely vital for us to collect data on the provision and use of the website and for these data to be processed by external web hosting companies. You have the right to object to processing of this kind. In the event that your objection is legitimate, we will review the situation and either stop processing the data, change how we process the data or notify you if there are compelling legitimate grounds for us to continue processing the data.

Integration of third-party content

Third-party content (such as videos, maps, RSS feeds and graphics from other websites) is integrated into the website. The providers of this content ("third parties") require access to our users' IP addresses in order to send the content to their browsers. The IP address is therefore required to display this content.
We endeavour to use content of this kind only if the third party in question processes the IP address solely for the purpose of delivering the content. However we do not have any control over decisions by these third parties re-garding their use of IP addresses, e.g. for statistical purposes. Any relevant information available to us will be pro-vided below.
Some of the third parties may process data outside the European Union.
You can exercise your right to object by installing a JavaScript blocker such as the browser plug-in "NoScript" (www.noscript.net) or disabling JavaScript in your browser.
This may restrict the functionality of the website.

Google Maps

This website also uses the "Google Maps" service provided by Google to display maps or segments of maps, providing you with convenient access to the website's map function.
Google is told when you visit the relevant sub-pages of our website. The data referred to in the section above enti-tled "Access data" are also transferred to Google. These transfers take place regardless of whether you have a Google account and are logged into this account. If you are logged into a Google account, your data will be directly associated with your account. If you do not want this to happen, you must log out before clicking on the button.
Google stores your data as usage profiles and processes them for the purpose of advertising, market research and/or demand-oriented design of its website. In particular, data of this kind (even from users who are not logged in) are evaluated for the purpose of providing tailored advertising and informing other social network users about your activities on our website.
The legal basis for processing of this kind is Article 6(1)(f) GDPR. Its purpose is to make our website more user-friendly and to improve the service we provide to you. We do not know and cannot influence the length of time for which these data are stored by Google.
Further information on the purpose and scope of data processing by the plug-in provider can be obtained by con-sulting its data protection policies. These policies also contain further information on your rights and the settings you can change to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Further information on the terms and conditions of Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html.
If you wish to object to your data being processed in this way, you must contact Google in order to exercise your right to do so. You can disable or restrict the transfer of cookies by changing the settings in your web browser. Cookies which have previously been stored can be deleted at any time. You can also arrange for this to take place automatically. If you disable the use of cookies on our website, it may no longer be fully functional.

Statistical, analytics and marketing services

We use third-party statistical, analytics and marketing services. This allows us to optimise our website and ensure that it is user-friendly. The third parties use cookies to deliver their services (see the section above entitled "Cook-ies"). Unless otherwise indicated below, your personal data will not be processed.
Some of the third parties allow you to object directly to use of the relevant service, e.g. by setting an opt-out cookie.
If you choose to do so, the external provider will no longer process data on your usage behaviour in future. It is also possible to object selectively to individual external services. If you change browser or end device or delete all your cookies, you must set the opt-out cookie again.
You can also exercise your right to object directly to the use of cookies via the opt-out platform operated by Bun-desverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or the opt-out page operated by the Network Advertis-ing Initiative at http://www.networkadvertising.org/choices/. Further information on usage-based advertising and ways of opting out can be found at: http://www.youronlinechoices.com/de/.
The external services currently deployed on our website are explained below, together with details of the purpose for which they process data and the scope of this processing, and how you can exercise your right to object.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, to tailor our website to your interests. Google Analytics uses cookies (see the section above entitled "Cookies") which are stored on your computer and make it possible to analyse your use of the website. The website usage data generated in this way are transferred to a Google server in the USA and processed there.
If IP anonymisation is enabled for this website, your IP address will first be shortened by Google if you are located within an EU Member State or another contracting party to the Agreement on the European Economic Area. In exceptional cases only, the full IP address will be transferred to a Google server in the USA and shortened there. Google uses these data on our behalf to evaluate your use of the website, to compile reports for us on website ac-tivity, and to provide us with additional services relating to website and Internet use.
The IP address transferred by your browser in connection with the Google Analytics service is not combined by Google with any other data.
This website uses the Google Analytics extension "_anonymizeIp()". This ensures that IP addresses are shortened before further processing, and rules out the possibility of individuals being identified. Any data collected about you which may be identifying (personal data) are therefore excluded/erased immediately.
We use Google Analytics to analyse the use of our website and improve it on a regular basis. We use the statistics supplied on this basis to optimise our website and make it more interesting for you. In the exceptional event that personal data are transferred to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing of data by Google Analytics is Article 6(1)(f) GDPR. Google Analytics cookies are erased after a period of no more than 14 months.
You have the right to object to your personal data being processed in this way. You can prevent cookies being stored by changing the settings of your browser software; if you do so, however, the website may no longer be fully functional. You can also prevent Google collecting and processing any data generated by cookies in relation to your usage of the website (including your IP address) by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the third-party provider Google can be found at:
http://www.google.com/analytics/terms/de.html, http://www.google.com/intl/de/analytics/learn/privacy.html, http://www.google.de/intl/de/policies/privacy.

Hotjar

We also use the Hotjar analytics service to improve our website and make it more user-friendly. This analytics service is provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, +1 (855) 464-6788, david@hotjar.com)
The Hotjar tool detects movement on specific webpages using "heatmaps". None of the data collected in this con-nection can be assigned to individual users. It simply helps us to understand how users move around the screen, where they click and how far down they scroll. This helps us to improve our website and make it more user-friendly. Other data which are collected include the device type and screen size, the browser, the country of the user and the preferred language. Any personal data displayed on a website are automatically hidden by Hotjar. We cannot therefore access these data.
Hotjar uses cookies (see the section above entitled "Cookies") to analyse your usage behaviour; these cookies are stored on your computer and make it possible to analyse your use of the website. The information generated by the tracking code and cookie about your visit to our website is transferred to the Hotjar servers and stored there. The tracking code is used to collect data about your end device such as IP address, device type, browser, geograph-ical location (country only), preferred language for viewing our website, pages visited and date and time of visit. Hotjar shortens your IP address before these data are processed. Any data collected about you which may be iden-tifying (personal data) are therefore excluded/erased immediately.
Hotjar uses these data to evaluate your use of our website, to produce usage reports and to provide other services relating to usage and evaluation of the website. When providing its own services, Hotjar also uses services provid-ed by third parties such as Google Analytics and Optimizely. These third-party companies may store information that your browser transfers in connection with a visit to our website, such as cookies or IP requests. For further information on how Google Analytics and Optimizely store and use data, please consult their data protection poli-cies.
The legal basis for processing of this kind is Article 6(1)(f) GDPR. The cookies set by Hotjar are stored for varying lengths of time. Some are stored for up to 365 days, whereas others remain valid only during the current visit. More detailed information can be found at: https://www.hotjar.com/legal/policies/cookie-information. Further information on Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com/legal/policies/privacy.
You can object to the processing of your data in this way as follows:
• by activating the "do not track" function in your browser software (supported by Hotjar). Instructions on how to activate the "do not track" function can be found at: https://www.hotjar.com/legal/compliance/opt-out
• by selecting the appropriate settings in your browser software (in particular by disabling third-party cookies, which means that you will no longer be shown advertisements from third-party providers), or
• by disabling personalised advertisements from advertisers which belong to the self-regulatory pro-gramme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cookies)

Mixpanel

The website also uses the Mixpanel analytics service provided by Mixpanel Inc., 405 Howard St., 2nd Floor, San Francisco, CA 94105, +1-415-688-4001, compliance@mixpanel.com.
The Mixpanel service logs website visits and activity. We use Mixpanel to refine our understanding of the behav-iour of users visiting our website, in order to improve their visitor experience and optimise our website's perfor-mance.
Mixpanel uses cookies (see the section above entitled "Cookies") to analyse your usage behaviour; these cookies are stored on your computer and make it possible to analyse your use of the website. The information generated by the cookie about your visit to our website is transferred to the Mixpanel servers and stored there.
The usage data for users of our website processed in this connection by Mixpanel Inc. are all pseudonymised. These pseudonymised data are not combined with personal data. Further information on Mixpanel and the pro-cessing of data by Mixpanel Inc. can be obtained by consulting Mixpanel Inc.'s data protection policy at https://mixpanel.com/privacy/ and https://mixpanel.com/legal/dpa/.
The legal basis for processing of this kind is Article 6(1)(f) GDPR. Our use of Mixpanel services allows us to obtain usage statistics for our website. We use these statistics to improve our website on a regular basis and make it more interesting for you. We do not know and cannot influence the length of time for which these data are stored by Mixpanel.
You can object to the processing of your data in this way as follows:
• by visiting https://mixpanel.com/optout/, clicking on the checkbox "Yes, I would like to opt out." and then clicking on the save button.
• by selecting the appropriate settings in your browser software (in particular by disabling third-party cookies, which means that you will no longer be shown advertisements from third-party providers).

Usage-based online advertising

Facebook Custom Audiences

The website also uses the "Website Custom Audiences" function and the "Facebook pixel" provided by Facebook Inc. (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook").
This allows website users to see personalised advertisements ("Facebook ads") when visiting Facebook's social networking site or other websites which also display these advertisements. Our aim in using this function is to show you relevant advertisements in order to make our website more interesting.
The marketing tools deployed mean that your browser will automatically establish a direct connection with the Facebook server. We have no influence over the scope of the data collected by Facebook via this tool or the way in which they are processed. According to the information at our disposal; integration of Facebook Custom Audienc-es means that Facebook is told whenever you visit our website or click on one of our advertisements. If you are registered with a Facebook service, Facebook may be able to associate the visit with your account. Even if you are not registered with Facebook or are not logged in, it is possible that Facebook may detect and store your IP address and other identifying features.
The legal basis for the processing of your data is Article 6(1)(f) GDPR. We do not store any of your personal data in such cases. We do not know and cannot influence the length of time for which these data are stored by Facebook.
Logged-in users can exercise their right to object and disable the "Facebook Custom Audiences" function by visit-ing https://www.facebook.com/settings/?tab=ads#_.
You can opt out of "Facebook Custom Audiences" and thereby exercise your right to object as follows:
• by selecting the appropriate settings in your browser software (in particular if you disable third-party cookies, which means that you will no longer be shown advertisements from third-party providers);
• by disabling personalised advertisements from advertisers which belong to the self-regulatory pro-gramme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cookies).
Further information on the processing of data by Facebook can be found at https://www.facebook.com/about/privacy.

Facebook Analytics

Our website uses Facebook Analytics and the "tracking pixel" of Facebook Inc. (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook") to track your user behaviour. The information obtained via the tracking pixel cookie is anonymised by Facebook before being transferred to us, and provides no information on a user's identity; we use this information for statistical purposes alone. In accordance with Facebook's data protection policies, however, this information is associated with your Facebook account, stored and used by Facebook for its own advertising purposes; this may include transferring your data to Face-book's partners. Even if you are not registered with Facebook or are not logged in, it is possible that Facebook may detect and store your IP address and other identifying features.
Your data are processed on the basis of Article 6(1)(f) GDPR in such cases. Our aim in using Facebook Analytics is to evaluate our web-based activities more accurately and improve the service we provide. We do not store any of your personal data in such cases. We do not know and cannot influence the length of time for which these data are stored by Facebook.
Logged-in users can exercise their right to object and disable the "Facebook Analytics" function by visiting https://www.facebook.com/settings/?tab=ads#_.
You can opt out of "Facebook Analytics" and thereby exercise your right to object as follows:
• by selecting the appropriate settings in your browser software (in particular by disabling third-party cookies, which means that you will no longer be shown advertisements from third-party providers).
• by disabling personalised advertisements from advertisers which belong to the self-regulatory pro-gramme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cookies).
More information on Facebook's data protection policies can be found at https://de-de.facebook.com/about/privacy/.

Google AdWords Conversion

We use the Google Adwords service provided by Google to alert users of external websites to products and ser-vices in our range that may interest them using advertisements ("Google AdWords"). The data we are provided with in relation to these advertising campaigns allow us to gauge how successful they have been. Our aim is to show you relevant advertisements in order to make our website more interesting and ensure that advertising costs are calculated fairly.
These advertisements are supplied by Google via the company's "Ad Server". We also use Ad Server cookies which track certain metrics such as the number of advertisements displayed or the number of user clicks. If you reach our website via a Google ad, Google AdWords stores a cookie on your PC. These cookies typically become invalid after 30 days and are not designed to be used to identify you individually. As a general rule, the analytical values stored by these cookies include a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (indication that the user no longer wishes to see these advertisements).
These cookies allow Google to recognise your web browser. If a user visits certain pages on an AdWords adver-tiser's website and the cookie stored on his or her computer has not yet expired, Google and the advertiser will be told that the user has clicked on the advertisement and been taken to this website. Each Adwords advertiser is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We do not process any personal data in connection with the advertising measures referred to above. Google only pro-vides us with statistical evaluations. We can use these evaluations to identify which advertising measures are most effective. We are not provided with any additional data in connection with these advertisements; in particular, we cannot use the information to identify users.
The marketing tools deployed mean that your browser will automatically establish a direct connection with the Google server. We have no influence over the scope of the data collected by Google via this tool or the way in which they are processed. According to the information at our disposal: integration of AdWords Conversion means that Google is told whenever you visit our website or click on one of our advertisements. If you are regis-tered with a Google service, Google may be able to associate the visit with your account. Even if you are not regis-tered with Google or are not logged in, it is possible that Google may detect and store your IP address. Google pro-cesses data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for the processing of your data is Article6(1)(f) GDPR. We do not know and cannot influence the length of time for which these data are stored by Google.
You can opt out of this tracking as follows:
• by selecting the appropriate settings in your browser software (in particular if you disable third-party cookies, which means that you will no longer be shown advertisements from third-party providers);
• by disabling cookies for conversion tracking; this can be achieved by changing the settings in your brows-er to ensure that cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/ads (this setting is lost if you delete your cookies);
• by disabling personalised advertisements from advertisers which belong to the self-regulatory pro-gramme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cookies);
• by permanently disabling the feature in a Firefox, Internet Explorer or Google Chrome browser; for fur-ther information, visit http://www.google.com/settings/ads/plugin. If you do so, our website may no longer be fully functional.
For further information about Google's data protection policies, visit: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternative-ly, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

Google Remarketing

As well as Adwords Conversion, our website also uses Google Remarketing. This application helps us to get in touch with you again. It means that we can display our advertisements to you on other websites after you have left our website. This is achieved by means of cookies stored in your browser which allow Google to detect and evalu-ate user behaviour as you visit different websites. Google can detect previous visits to our website. According to Google, it does not combine the data it collects through the Google Remarketing application with any other person-al data it processes. In particular, it uses pseudonymisation for any data it collects through this application.
The legal basis for processing of this kind is Article 6(1)(f) GDPR. We do not know and cannot influence the length of time for which these data are stored by Google.
You can opt out of this tracking and thereby exercise your right to object as follows:
• by selecting the appropriate settings in your browser software (in particular if you disable third-party cookies, which means that you will no longer be shown advertisements from third-party providers);
• by disabling cookies for conversion tracking; this can be achieved by changing the settings in your brows-er to ensure that cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/ads (this setting is lost if you delete your cookies);
• by disabling personalised advertisements from advertisers which belong to the self-regulatory pro-gramme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cookies);
• by permanently disabling ads in a Firefox, Internet Explorer or Google Chrome browser; for further in-formation, visit http://www.google.com/settings/ads/plugin.

Google DoubleClick

We also use Google DoubleClick (an online marketing tool) on our website. DoubleClick sets cookies in order to display user-relevant advertisements, to improve reporting on advertising campaigns or to avoid displaying the same advertisements to users on multiple occasions. Google uses a cookie ID (a pseudonymous ID number as-signed to your browser) to detect which advertisements are displayed in which browser so that it can prevent them being repeated. Information on your activities as a website user is assigned to this pseudonym. This allows Google and its partner websites to display advertisements on the basis of your previous visits. DoubleClick can also use the cookie ID to detect conversions in relation to ad requests, for example in cases where a user sees a DoubleClick advertisement and later uses the same browser to visit the advertiser's website and buy something there.
The information generated by the DoubleClick cookies is transferred by Google to a server in the USA and stored there. Google observes the data protection provisions of the EU-US Privacy Shield Agreement and is Privacy Shield-certified https://www.privacyshield.gov/EU-US-Framework. The data are only transferred to third parties in compliance with the statutory provisions or in cases where the third parties are acting as processors. According to Google, DoubleClick cookies contain no personal information.
The marketing tools deployed mean that your browser will automatically establish a direct connection with the Google server. We have no influence over the scope of the data collected by Google via this tool or the way in which they are processed. According to the information at our disposal: integration of DoubleClick means that Google is told whenever you visit our website or click on one of our advertisements. If you are registered with a Google service, Google may be able to associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may detect and store your IP address.
The legal basis for processing of this kind is Article 6(1)(f) GDPR. DoubleClick cookies are erased after a period of no more than six months. Our aim in using DoubleClick is to show you relevant advertisements in order to make our website more interesting.
You can opt out of this tracking and thereby exercise your right to object as follows:
by selecting the appropriate settings in your browser software (in particular if you disable third-party cookies, which means that you will no longer be shown advertisements from third-party providers);
by disabling cookies for conversion tracking; this can be achieved by changing the settings in your browser to ensure that cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/ads (this setting is lost if you delete your cookies);
by disabling personalised advertisements from advertisers which belong to the self-regulatory programme "About Ads"; for further information, visit http://www.aboutads.info/choices (this setting is lost if you delete your cook-ies);
by permanently disabling ads in a Firefox, Internet Explorer or Google Chrome browser; for further information, visit http://www.google.com/settings/ads/plugin.
For further information about DoubleClick, visit: https://www.google.de/doubleclick, http://support.google.com, https://policies.google.com/privacy?hl=de (general information on Google's data protection policies).