Privacy Policy

 

This cookie table has been created and updated by the CookieFirst consent management platform.

 

How can I switch off or remove cookies? You can choose to opt out of all but the necessary cookies. In the settings of the browser, you can change the settings to ensure that cookies will be blocked. Most browsers provide you with an explanation on how to do this in the so-called ‘help-function’. However, if you block the cookies, it is possible that you will not be able to enjoy all the technical features our website has to offer, and it may negatively affect your user experience.

We have made it easy to manage your consents. Use either this Link or one of the following buttons

Change cookie settings Withdraw consent

CCPA required information are shared here http://g.ezoic.net/privacy/besttime2travel.com/annualRequestSummary

Tracking: A Do Not Track (DNT) standard has not been adopted to this day, and therefore BestTime2Travel.com doesn't use DNT signals.

To learn more about DNT and BestTime2Travel’s DNT practices, please read on:

On September 27, 2013, California Governor Jerry Brown signed into law A.B. 370, amending the California Online Privacy Protection Act (CalOPPA) to require website operators like BestTime2Travel.com to disclose how they responds to DNT Signals; and whether third parties collect personally identifiable information (PII) about users when they visit the website.

What is DNT? DNT is the concept that has been promoted by regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
What is a DNT signal? Currently, various browsers (including Chrome, Internet Explorer, Edge, Firefox, and Safari) offer a DNT option that relies on a technology known as a DNT header that sends a signal to websites visited by the browser user about the user's DNT preference. You can usually access your browser's DNT option in your browser's preferences.
Is there a DNT technology standard? The World Wide Web Consortium (W3C) has been working with industry groups, Internet browsers, technology companies, and regulators to develop a DNT technology standard. While some progress has been made on this issue, it has been slow, and to date no standard has been adopted. Without an industry standard for DNT, users cannot know how any given company abides by a DNT signal they receive from browser headers. BestTime2Travel.com is committed to remaining apprised of the W3C efforts to develop a DNT standard.
How does BestTime2Travel.com respond to the signal? BestTime2Travel.com takes privacy and security very seriously. Regarding DNT, BestTime2Travel.com currently doesn't respond to DNT signals in browsers because no DNT standard has been adopted, as noted above.

Commercial Services

We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as "contractual partners") within the context of contractual and comparable legal relationships as well as associated actions and communication with the contractual partners or pre-contractually, e.g. to answer inquiries.

We process this data in order to fulfill our contractual obligations, safeguard our rights, and for the purposes of the administrative tasks associated with this data and the business-related organization. We will only pass on the data of the contractual partners within the scope of the applicable law to third parties insofar as this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of data subjects concerned (e.g. telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about further processing, e.g. for marketing purposes, as part of this privacy policy.

Which data are necessary for the aforementioned purposes, we inform the contracting partners before or in the context of the data collection, e.g. in online forms by special marking (e.g. colors), and/or symbols (e.g. asterisks or the like), or personally.

We delete the data after the expiry of statutory warranty and comparable obligations, i.e. in principle after the expiry of 4 years, unless the data is stored in a customer account or must be kept for legal reasons of archiving (e.g., as a rule, 10 years for tax purposes). In the case of data disclosed to us by the contractual partner within the context of an assignment, we delete the data in accordance with the specifications of the assignment, in general after the end of the assignment.

If we use third-party providers or platforms to provide our services, the terms and conditions and privacy policies of the respective third-party providers or platforms shall apply in the relationship between the users and the providers.

Travel-related Services: We process the data of our customers and interested parties (uniformly referred to as "customers") in accordance with the underlying contractual relationship. Furthermore, we may process the information on the characteristics and circumstances of persons or items belonging to them if this is necessary within the framework of the contractual relationship. These can be, for example, information on personal circumstances, mobile assets, and financial situation.

As part of our assignment, it may be necessary for us to process special categories of data within the meaning of Article 9 (1) GDPR, in particular information on the health of a person. The processing takes place in order to protect the health interests of the customers and otherwise only with the consent of the customers.

If necessary for the fulfillment of the contract or required by law, or agreed to by customers or on the basis of our legitimate interests, we disclose or transmit the customer's data, for example to the service providers involved in the fulfillment of the travel services.

Further information on commercial services: We process the data of our customers and clients (hereinafter uniformly referred to as "customers") in order to enable them to select, acquire or commission the selected services or works and related tasks, as well as their payment and delivery, or execution or provision.

The required details are identified as such within the framework of the conclusion of the order, order or comparable contract and include the details required for service provision and invoicing as well as contact information in order to be able to hold any consultations.

• Processed data types: Inventory data (e.g. names, addresses), Payment Data (e.g. bank details, invoices, payment history), Contact data (e.g. e-mail, telephone numbers), Contract data (e.g. contract object, duration, customer category).
• Data subjects: Prospective customers, Business, and contractual partners.
• Purposes of Processing: Provision of contractual services and customer support, Contact requests and communication, Office and organizational procedures, Managing and responding to inquiries.
• Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Compliance with a legal obligation (Article 6 (1) (c) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Use of Online Marketplaces for E-Commerce

We offer our services on online platforms operated by other service providers. In addition to our privacy policy, the privacy policies of the respective platforms apply. This is particularly true with regard to the methods used on the platforms for performance measuring and behavior-related marketing.

• Processed data types: Inventory data (e.g. names, addresses), Payment Data (e.g. bank details, invoices, payment history), Contact data (e.g. e-mail, telephone numbers), Contract data (e.g. contract object, duration, customer category), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
• Data subjects: Customers.
• Purposes of Processing: Provision of contractual services and customer support.
• Legal Basis: Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Services and service providers being used:

• Amazon: Online marketplace for e-commerce; Service provider: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (together "Amazon Europe"), parent company: Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA; Website: https://www.amazon.de/; Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=201909010.

Provision of online services and web hosting

In order to provide our online services securely and efficiently, we use the services of one or more web-hosting providers from whose servers (or servers they manage) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security and technical maintenance services.

The data processed within the framework of the provision of the hosting services may include all information relating to the users of our online services that is collected in the course of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online services to browsers, and all entries made within our online services or from websites.

Collection of Access Data and Log Files: We, ourselves, or our web hosting provider, collect data on the basis of each access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, the date and time of access, data volumes transferred notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a general rule, IP addresses, and the requesting provider.

The server log files can be used for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and to ensure the stability and optimal load balancing of the servers.

Content-Delivery-Network: We use a so-called "Content Delivery Network" (CDN). A CDN is a service with whose help contents of our online services, in particular large media files, such as graphics or scripts, can be delivered faster and more securely with the help of regionally distributed servers connected via the Internet.

• Processed data types: Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of Processing: Content Delivery Network (CDN).
• Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR).

Services and service providers being used:

• Amazon Web Services (AWS): Web hosting and infrastructural services; Service provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA; Website: https://aws.amazon.com/; Privacy Policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.

Web Analysis, Monitoring, and Optimization

Web analysis is used to evaluate the visitor traffic on our website and may include the behavior, interests, or demographic information of users, such as age or gender, as pseudonymous values. With the help of web analysis, we can e.g. recognize, at which time our online services or their functions or contents are most frequently used or requested for repeatedly, as well as which areas require optimization.

In addition to web analysis, we can also use test procedures, e.g. to test and optimize different versions of our online services or their components.

For these purposes, so-called user profiles can be created and stored in a file (so-called "cookie") or similar procedures in which the relevant user information for the aforementioned analyses is stored. This information may include, for example, content viewed, web pages visited and elements and technical data used there, such as the browser used, computer system used, and information on times of use. If users have consented to the collection of their location data, these may also be processed, depending on the provider.

The IP addresses of the users are also stored. However, we use any existing IP masking procedure (i.e. pseudonymization by shortening the IP address) to protect the user. In general, within the framework of web analysis, A/B testing, and optimization, no user data (such as e-mail addresses or names) is stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective processes.

Information on the legal basis: If we ask the users for their consent to the use of third-party providers, the legal basis of the processing is consent. Furthermore, the processing can be a component of our (pre)contractual services, provided that the use of the third party was agreed upon within this context. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economic, and recipient friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

• Processed data types: Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of Processing: Web Analytics (e.g. access statistics, recognition of returning visitors), Targeting (e.g. profiling based on interests and behavior, use of cookies), Conversion tracking (Measurement of the effectiveness of marketing activities), Profiling (Creating user profiles), Feedback (e.g. collecting feedback via online form).
• Security measures: IP Masking (Pseudonymization of the IP address).
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Services and service providers being used:

• Amazon Personalize: Amazon Personalize is a machine learning service that makes it easier for developers to create customized recommendations for customers who use their applications; Service provider: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (together "Amazon Europe"), parent company: Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA; Website: https://aws.amazon.com/personalize/; Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=201909010.
• Google Analytics: web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/en/about/analytics/; Privacy Policy: https://policies.google.com/privacy.
• Google Tag Manager: Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate other services into our online services (please refer to further details in this privacy policy). With the Tag Manager itself (which implements the tags), for example, no user profiles are created or cookies are stored. Google only receives the IP address of the user, which is necessary to run the Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Matomo: The information generated by the cookie about your use of this website will only be stored on our server and not disclosed to third parties; Service provider: Web analytics/ reach measurement in self-hosting; Website: https://matomo.besttime2travel.de/; Retention period: The cookies have a maximum storage period of 13 months.
• Microsoft Clarity: Clarity captures the user interactions on this website such as how the page has rendered and what interactions your user had on your website such as mouse movements, clicks, scrolls, etc. The code to capture this information is open source and available on GitHub. Clarity is GDPR compliant as a data controller and Clarity processes data in compliance with the California Consumer Privacy Act (CCPA). For more information, see Microsoft Privacy Statement. The data will be retained for web master's consumption up to a period of 12 months from the time of recording. For more information, see Clarity Terms of use.

Online marketing

We process personal data for the purposes of online marketing, which may include in particular the marketing of advertising space or the display of advertising and other content (collectively referred to as "Content") based on the potential interests of users and the measurement of their effectiveness.

For these purposes, so-called user profiles are created and stored in a file (so-called "cookie") or a similar procedure in which the relevant user information for the display of the aforementioned content is stored. This information may include, for example, content viewed, websites visited, online networks used, communication partners, and technical information such as the browser used, computer system used, and information on usage times. If users have consented to the collection of their sideline data, these can also be processed.

The IP addresses of the users are also stored. However, we use provided IP masking procedures (i.e. pseudonymization by shortening the IP address) to ensure the protection of the user's by using a pseudonym. In general, within the framework of the online marketing process, no clear user data (such as e-mail addresses or names) is secured, but pseudonyms. This means that we, as well as the providers of online marketing procedures, do not know the actual identity of the users, but only the information stored in their profiles.

The information in the profiles is usually stored in the cookies or similar memorizing procedures. These cookies can later, generally also on other websites that use the same online marketing technology, be read and analyzed for purposes of content display, as well as supplemented with other data and stored on the server of the online marketing technology provider.

Exceptionally, clear data can be assigned to the profiles. This is the case, for example, if the users are members of a social network whose online marketing technology we use and the network links the profiles of the users in the aforementioned data. Please note that users may enter into additional agreements with the social network providers or other service providers, e.g. by consenting as part of a registration process.

As a matter of principle, we only gain access to summarized information about the performance of our advertisements. However, within the framework of so-called conversion measurement, we can check which of our online marketing processes have led to a so-called conversion, i.e. to the conclusion of a contract with us. The conversion measurement is used alone for the performance analysis of our marketing activities.

Unless otherwise stated, we kindly ask you to consider that cookies used will be stored for a period of two years.

Information on the legal basis: If we ask users for their consent (e.g. in the context of a so-called "cookie banner consent"), the legal basis for processing data for online marketing purposes is this consent. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation of our online services. In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

Google Analytics Audiences: We use Google Analytics to display ads placed by Google and its partners only to users who have shown an interest in our online services or who have specific characteristics (e.g. interests in specific topics or products determined on the basis of the websites visited) that we transmit to Google (so-called "Remarketing Audiences" or "Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users.

Google Universal Analytics (en): We use Google Analytics in the form of Universal Analytics (https://support.google.com/analytics/answer/2790010?hl=en&ref_topic=6010376). "Universal Analytics" refers to a Google Analytics process in which user analysis is performed on the basis of a pseudonymous user ID, thereby creating a pseudonymous profile of the user with information from the use of various devices (so-called "cross-device tracking").

Facebook Pixel and Custom Audiences (Custom Audiences): With the help of the Facebook pixel (or equivalent functions, to transfer Event-Data or Contact Information via interfaces or other software in apps), Facebook is, on the one hand, able to determine the visitors of our online services as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use Facebook pixels to display Facebook ads placed by us only to Facebook users and within the services of partners cooperating with Facebook (so-called "audience network" https://www.facebook.com/audiencenetwork/ ) who have shown an interest in our online services or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of Facebook pixels, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not appear annoying. The Facebook pixel also enables us to track the effectiveness of Facebook ads for statistical and market research purposes by showing whether users were referred to our website after clicking on a Facebook ad (known as "conversion tracking").

We are jointly responsible (so-called "joint-controllership") with Facebook Ireland Ltd. for the collection or transmission (but not the further processing) of "event data" that Facebook collects or receives as part of a transmission for the following purposes using the Facebook pixel and comparable functions (e.g. APIs) that are implemented in our online services: a) displaying content advertising information that matches users' presumed interests; b) delivering commercial and transactional messages (e.g. b) delivering commercial and transactional messages (e.g., addressing users via Facebook Messenger); c) improving ad delivery and personalizing features and content (e.g., improving recognition of which content or advertising information is believed to be of interest to users). We have entered into a special agreement with Facebook ("Controller Addendum", https://www.facebook.com/legal/controller_addendum), which specifically addresses the security measures that Facebook must take (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to comply with the rights of data subjects (i.e., users can, for example, submit information access or deletion requests directly to Facebook). Note: If Facebook provides us with measurements, analyses and reports (which are aggregated, i.e. do not contain information on individual users and are anonymous to us), then this processing is not carried out within the scope of joint responsibility, but on the basis of a DPA ("Data Processing Terms", https://www.facebook.com/legal/terms/dataprocessing), the "Data Security Conditions" (https://www.facebook.com/legal/terms/data_security_terms) and, with regard to processing in the USA, on the basis of Standard Contractual Clauses ("Facebook EU Data Transfer Addendum, https://www.facebook.com/legal/EU_data_transfer_addendum). The rights of users (in particular to access to information, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook.

Advanced matching for the Facebook pixel: In addition to the processing of Event Data in the context of the use of the Facebook Pixel (or equivalent functions, e.g. in apps), Contact Information (data identifying individual persons, names, email addresses, and telephone numbers) is also collected by Facebook within our online offer or transmitted to Facebook. The processing of contact information serves to form target groups (so-called " Custom Audiences") for the display of content and advertising information based on the presumed interests of users. The collection, or transmission and matching with data available on Facebook is not in plain text, but as so-called "hash values", i.e. mathematical representations of the data (this method is used, for example, in the storage of passwords). After the matching to create target groups, the Contact Information is deleted. The Contact Information is processed on the basis of a DPA with Facebook Ireland Ltd. ("Data Processing Terms", https://www.facebook.com/legal/terms/dataprocessing), the "Data Security Terms" (https://www.facebook.com/legal/terms/data_security_terms) and, with regard to processing in the USA, on the basis of Standard Contractual Clauses ("Facebook-EU Data Transfer Addendum", https://www.facebook.com/legal/EU_data_transfer_addendum). For more information on the processing of contact information, please refer to the "Facebook Business Tools Terms", https://www.facebook.com/legal/technology_terms.

Facebook - Custom Audiences from File: We submit Contact Information (names, email addresses and phone numbers) to Facebook in list form for the purpose of creating Custom Audiences for content and advertising information based on the presumed interests of users. The transmission and matching with data available on Facebook is not in plain text, but as so-called "hash values", i.e. mathematical representations of the data (this method is used, for example, in the storage of passwords). After the matching to create target groups, the Contact Information is deleted. The Contact Information is processed on the basis of a DPA with Facebook Ireland Ltd. ("Data Processing Terms", https://www.facebook.com/legal/terms/dataprocessing), the "Data Security Terms" (https://www.facebook.com/legal/terms/data_security_terms) and, with regard to processing in the USA, on the basis of Standard Contractual Clauses ("Facebook-EU Data Transfer Addendum", https://www.facebook.com/legal/EU_data_transfer_addendum). Further information on the processing of contact information can be found in the "Facebook Business Tools Terms", https://www.facebook.com/legal/terms/customaudience.

• Processed data types: Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses), Location data (Information on the geographical position of a device or person), Social data (Data subject to a special social confidentiality obligation and processed, for example, by social insurance institutions, social welfare institutions or pension authorities.), Event Data (Facebook) ("Event Data" is data that can be transmitted from us to Facebook, e.g. via Facebook pixels (via apps or other means) and relates to persons or their actions; the data includes, for example, information about visits to websites, interactions with content, functions, installations of apps, purchases of products, etc.; Event data is processed for the purpose of creating target groups for content and advertising information (Custom Audiences); Event Data does not include the actual content (such as written comments), login information, and Contact Information (such as names, email addresses, and phone numbers). Event Data is deleted by Facebook after a maximum of two years, the Custom Audiences created from them with the deletion of our Facebook account), Contact Information (Facebook) ("Contact Information" is data that (clearly) identifies data subjects, such as names, email addresses, and phone numbers, that can be transmitted to Facebook, e.g. via Facebook pixels or uploads for matching purposes to form Custom Audiences; After the matching to create target groups, the Contact Information is deleted).
• Data subjects: Users (e.g. website visitors, users of online services), Prospective customers, Customers, Employees (e.g. Employees, job applicants), Communication partner (Recipients of e-mails, letters, etc.).
• Purposes of Processing: Targeting (e.g. profiling based on interests and behavior, use of cookies), Remarketing, Conversion tracking (Measurement of the effectiveness of marketing activities), Interest-based and behavioral marketing, Profiling (Creating user profiles), Web Analytics (e.g. access statistics, recognition of returning visitors), Cross-Device Tracking (Device-independent processing of user data for marketing purposes), Custom Audiences (Selection of relevant target groups for marketing purposes or other output of content), Click tracking.
• Security measures: IP Masking (Pseudonymization of the IP address).
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).
• Opt-Out: We refer to the privacy policies of the respective service providers and the possibilities for objection (so-called "opt-out"). If no explicit opt-out option has been specified, it is possible to deactivate cookies in the settings of your browser. However, this may restrict the functions of our online offer. We therefore recommend the following additional opt-out options, which are offered collectively for each area: a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-regional: https://optout.aboutads.info.

Services and service providers being used:

• Google Tag Manager: Google Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate other services into our online services (please refer to further details in this privacy policy). With the Tag Manager itself (which implements the tags), for example, no user profiles are created or cookies are stored. Google only receives the IP address of the user, which is necessary to run the Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Google Analytics: Online marketing and web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/en/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the Display of Advertisements: https://adssettings.google.com/authenticated.
• Google Analytics Audiences: Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Google Universal Analytics (en): Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Security measures: IP Masking (Pseudonymization of the IP address); Privacy Policy: https://policies.google.com/privacy.
• Google Ads and Conversion Tracking: We use the Google "Ads" online marketing method to place ads on the Google advertising network (e.g., in search results, videos, websites, etc.) so that they are displayed to users who have an alleged interest in the ads. We also measure the conversion of the ads. However, we only know the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we ourselves do not receive any information that can be used to identify users. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Google Ad Manager: We use the "Google Marketing Platform" (and services like "Google Ad Manager") to place ads in the Google advertising network (e.g., in search results, in videos, on websites, etc.). The Google Marketing Platform" is characterized by the fact that ads are displayed in real-time according to the presumed interests of the users. This allows us to display ads for and within our online services in a more targeted manner in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products in which he is interested in other online offers, this is referred to as "remarketing". Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Google Signals: Additional marketing options that apply only to users who have enabled personalized ads on Google (https://support.google.com/ads/answer/2662856) and include device-based and cross-device data processing; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://support.google.com/analytics/answer/7532985?hl=en; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the Display of Advertisements: https://adssettings.google.com/authenticated.
• Google Adsense with personalized ads: We use the Google Adsense service with personalized ads, which helps us to display ads within our online services and we receive a remuneration for their display or other use. ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Google Adsense with non-personalized ads: We use the Google Adsense service with non-personalized ads, which helps us to display ads within our online services and we receive a remuneration for their display or other use. ; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.
• Facebook Pixel and Custom Audiences (Custom Audiences): Service provider: https://www.facebook.com, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Opt-Out: https://www.facebook.com/settings?tab=ads.
• Microsoft Advertising: Remarketing / Conversion measurement; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Website: https://about.ads.microsoft.com/en-us; Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement; Opt-Out: https://choice.microsoft.com/en-us/opt-out.
• Ezoic: Service Provider:  Ezoic Inc., 6023 Innovation Way, Carlsbad, California, United States, Ezoic Limited, Northern Design Centre, Abbott's Hill, Gateshead, NE8 3DF United Kingdom; Website Ezoic | Intelligent Technology For Exceptional Content; Privacy Policy: Ezoic Private Policy | Everything About Staying Protected

Affiliate-Programs and Affiliate-Links

Within our online services, we include so-called affiliate links or other references (which for example may include search forms, widgets, or discount codes) to the offers and services of third parties (collectively referred to as "affiliate links"). When users follow affiliate links or subsequently take advantage of offers, we may receive commission or other benefits (collectively referred to as "commission") from these third parties.

In order to be able to track whether the users have followed the offers of an affiliate link used by us, it is necessary for the respective third party to know that the users have followed an affiliate link used within our online services. The assignment of affiliate links to the respective business transactions or other actions (e.g., purchases) serves the sole purpose of commission settlement and is removed as soon as it is no longer required for this purpose.

For the purposes of the aforementioned affiliate link assignment, the affiliate links may be supplemented by certain values that may be a component of the link or otherwise stored, for example, in a cookie. The values may include in particular the source website (referrer), time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user.

Information on the legal basis: If we ask the users for their consent to the use of third-party providers, the legal basis of the processing is consent. Furthermore, the processing can be a component of our (pre)contractual services, provided that the use of the third party was agreed upon within this context. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economic, and recipient friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

• Processed data types: Contract data (e.g. contract object, duration, customer category), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of Processing: Affiliate Tracking.
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Performance of a contract and prior requests (Article 6 (1) (b) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Services and service providers being used:

• Amazon Affiliate Program: Amazon Affiliate Program - Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its affiliates. Service provider: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (together "Amazon Europe"), parent company: Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA.; Website: https://www.amazon.com; Privacy Policy: https://www.amazon.com/gp/help/customer/display.html?nodeId=201909010.
• Booking.com Affiliate Program: Service provider: Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands; Website: https://www.booking.com; Privacy Policy: https://www.booking.com/content/privacy.html.
• GetYourGuide Partner Program: Service Provider: GetYourGuide Deutschland GmbH, Sonnenburger Strasse 73, 10437 Berlin, Germany
  Website: https://www.getyourguide.com/ Privacy Policy: https://www.getyourguide.com/privacy_policy
• Viator Partners: Service Provider: Viator, Inc., 360 Third Street, 4th Floor, San Francisco, California, 94107, United States, Website: https://www.viator.com/  ; Privacy Policy: https://www.viator.com/support/privacyPolicy
• Skyscanner: Skyscanner Limited, 777 Brickell Avenue, #500-95109, Miami, Florida 33131, United States. Website: https://www.skyscanner.com/  Privacy Policy:https://www.skyscanner.com/media/privacy-policy 

Profiles in Social Networks (Social Media)

We maintain an online presence within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.

We would like to point out that user data may be processed outside the European Union. This may entail risks for users, e.g. by making it more difficult to enforce users' rights.

In addition, user data is usually processed within social networks for market research and advertising purposes. For example, user profiles can be created on the basis of user behavior and the associated interests of users. The user profiles can then be used, for example, to place advertisements within and outside the networks which are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective networks or will become members later on).

For a detailed description of the respective processing operations and the opt-out options, please refer to the respective data protection declarations and information provided by the providers of the respective networks.

Also in the case of requests for information and the exercise of rights of data subjects, we point out that these can be most effectively pursued with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, please do not hesitate to contact us.

Facebook: We are jointly responsible (so-called "joint controller") with Facebook Ireland Ltd. for the collection (but not the further processing) of data of visitors to our Facebook page. This data includes information about the types of content users view or interact with, or the actions they take (see "Things that you and others do and provide" in the Facebook Data Policy: https://www.facebook.com/policy), and information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie information; see "Device Information" in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under "How we use this information?" Facebook also collects and uses the information to provide analytics services, known as "page insights," to site operators to help them understand how people interact with their pages and with content associated with them. We have concluded a special agreement with Facebook ("Information about Page-Insights", https://www.facebook.com/legal/terms/page_controller_addendum), which regulates, in particular, the security measures that Facebook must observe and in which Facebook has agreed to fulfill the rights of the persons concerned (i.e. users can send information access or deletion requests directly to Facebook). The rights of users (in particular to access to information, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information about Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data).

• Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of Processing: Contact requests and communication, Targeting (e.g. profiling based on interests and behavior, use of cookies), Remarketing, Web Analytics (e.g. access statistics, recognition of returning visitors).
• Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR).

Services and service providers being used:

• Instagram: Social network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, , Mutterunternehmen: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.
• Facebook: Social network; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Opt-Out: Settings for advertisements: https://www.facebook.com/settings?tab=ads.
• Pinterest: Social network; Service provider: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA,; Website: https://www.pinterest.com; Privacy Policy: https://about.pinterest.com/de/privacy-policy; Opt-Out: https://about.pinterest.com/de/privacy-policy.
• Twitter: Social network; Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy Policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization.
• YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.

Plugins and embedded functions and content

Within our online services, we integrate functional and content elements that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may, for example, be graphics, videos, or social media buttons as well as contributions (hereinafter uniformly referred to as "Content").

The integration always presupposes that the third-party providers of this content process the IP address of the user, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of these contents or functions. We strive to use only those contents, whose respective offerers use the IP address only for the distribution of the contents. Third parties may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include technical information about the browser and operating system, referring websites, visit times, and other information about the use of our website, as well as may be linked to such information from other sources.

Information on the legal basis: If we ask users for their consent (e.g. in the context of a so-called "cookie banner consent"), the legal basis for processing is this consent. Otherwise, user data will be processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation of our online services. We refer you to the note on the use of cookies in this privacy policy.

Facebook plugins and contents: We are jointly responsible (so-called "joint-controllership") with Facebook Ireland Ltd. for the collection or transmission (but no further processing) of "Event Data" that Facebook collects or receives as part of a transmission using the Facebook Social Plugins that run on our website for the following purposes: a) displaying content advertising information that matches users' presumed interests; b) delivering commercial and transactional messages (e.g. b) delivering commercial and transactional messages (e.g., addressing users via Facebook Messenger); c) improving ad delivery and personalizing features and content (e.g., improving recognition of which content or advertising information is believed to be of interest to users). We have entered into a special agreement with Facebook ("Controller Addendum", https://www.facebook.com/legal/controller_addendum), which specifically addresses the security measures that Facebook must take (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to comply with the rights of data subjects (i.e., users can, for example, submit information access or deletion requests directly to Facebook). Note: If Facebook provides us with measurements, analyses, and reports (which are aggregated, i.e. do not contain information on individual users and are anonymous to us), then this processing is not carried out within the scope of joint responsibility, but on the basis of a DPA ("Data Processing Terms", https://www.facebook.com/legal/terms/dataprocessing/update), the "Data Security Conditions" (https://www.facebook.com/legal/terms/data_security_terms) and, with regard to processing in the USA, on the basis of Standard Contractual Clauses ("Facebook EU Data Transfer Addendum, https://www.facebook.com/legal/EU_data_transfer_addendum). The rights of users (in particular to access to information, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook.

• Processed data types: Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Event Data (Facebook) ("Event Data" is data that can be transmitted from us to Facebook, e.g. via Facebook pixels (via apps or other means) and relates to persons or their actions; the data includes, for example, information about visits to websites, interactions with content, functions, installations of apps, purchases of products, etc.; Event data is processed for the purpose of creating target groups for content and advertising information (Custom Audiences); Event Data does not include the actual content (such as written comments), login information, and Contact Information (such as names, email addresses, and phone numbers). Event Data is deleted by Facebook after a maximum of two years, the Custom Audiences created from them with the deletion of our Facebook account), Location data (Information on the geographical position of a device or person), Inventory data (e.g. names, addresses).
• Data subjects: Users (e.g. website visitors, users of online services), Communication partner (Recipients of e-mails, letters, etc.).
• Purposes of Processing: Provision of our online services and usability, Targeting (e.g. profiling based on interests and behavior, use of cookies), Feedback (e.g. collecting feedback via online form), Provision of contractual services and customer support, Contact requests, and communication, Interest-based and behavioral marketing, Profiling (Creating user profiles), Security measures, Managing and responding to inquiries.
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR), Performance of a contract and prior requests (Article 6 (1) (b) GDPR).

Services and service providers being used:

• AddThis: AddThis - Functions to share content in social networks, AddThis uses users' personal information for providing and performing sharing functions. In addition, AddThis may use pseudonymous user information for marketing purposes. ; Service provider: AddThis, 1595 Spring Hill Rd Suite 300 Vienna, VA 22182, USA; Website: https://www.addthis.com; Privacy Policy: https://www.addthis.com/privacy; Opt-Out: https://www.addthis.com/privacy/opt-out.
• Facebook plugins and contents: Facebook Social Plugins and contents - This can include content such as images, videos, or text and buttons with which users can share content from this online service within Facebook. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland, Mutterunternehmen: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Opt-Out: Settings for advertisements: https://www.facebook.com/settings?tab=ads.
• Google Fonts: We integrate the fonts ("Google Fonts") of the provider Google, whereby the data of the users are used solely for purposes of the representation of the fonts in the browser of the users. The integration takes place on the basis of our legitimate interests in a technically secure, maintenance-free, and efficient use of fonts, their uniform presentation and consideration of possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy.
• Google Custom Search: Use of Google's search engine technology within our online services; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, , parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://developers.google.com/custom-search; Privacy Policy: https://policies.google.com/privacy.
• Google Maps: We integrate the maps of the service "Google Maps" from the provider Google. The data processed may include, in particular, IP addresses and location data of users, which are not collected without their consent (usually within the framework of the settings of their mobile devices); Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://cloud.google.com/maps-platform; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the Display of Advertisements: https://adssettings.google.com/authenticated.
• Google Maps APIs and SDKs: Interfaces to the map and location services provided by Google, which, for example, allow the addition of address entries, location determinations, distance calculations, or the provision of supplementary information on locations and other places; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://cloud.google.com/maps-platform; Privacy Policy: https://policies.google.com/privacy.
• OpenStreetMap: We integrate the maps of the service "OpenStreetMap", which are offered based on the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). OpenStreetMap uses user data exclusively for the purpose of displaying map functions and temporarily storing the selected settings. This data may include, in particular, IP addresses and location data of users, which are not collected without their consent (usually within the context of the settings of their mobile devices). Service provider: OpenStreetMap Foundation (OSMF); Website: https://www.openstreetmap.de; Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.
• Shariff: We use the privacy-secure "Shariff" buttons. "Shariff" was developed to provide more privacy on the net and to replace the usual "share" buttons of social networks. It is not the browser of the user, but the server on which this online offer is located, which establishes a connection with the server of the respective social media platforms and queries, for example, the number of Likes, etc.. The user remains anonymous. More information about the Shariff project can be found at the developers of the magazine c't: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html. Service provider: Heise Medien GmbH & Co. KG, Karl-Wiechert-Allee 10, 30625 Hannover, Germany; Website: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html; Privacy Policy: https://www.heise.de/Datenschutzerklaerung-der-Heise-Medien-GmbH-Co-KG-4860.html.
• Twitter plugins and contents: Twitter plugins and buttons - This can include content such as images, videos, or text and buttons with which users can share content from this online service within Twitter. Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Website: https://twitter.com; Privacy Policy: https://twitter.com/en/privacy.
• YouTube videos: Video contents; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for the Display of Advertisements: https://adssettings.google.com/authenticated.

Erasure of data

The data processed by us will be erased in accordance with the statutory provisions as soon as their processing is revoked or other permissions no longer apply (e.g. if the purpose of processing this data no longer applies or they are not required for the purpose).

If the data is not deleted because they are required for other and legally permissible purposes, their processing is limited to these purposes. This means that the data will be restricted and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or for which storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.

Further information on the erasure of personal data can also be found in the individual data protection notices of this privacy policy.

Changes and Updates to the Privacy Policy

We kindly ask you to inform yourself regularly about the contents of our data protection declaration. We will adjust the privacy policy as changes in our data processing practices make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, we ask you to note that addresses may change over time and to verify the information before contacting us.

Rights of Data Subjects

As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:

• Right to Object: You have the right, on grounds arising from your particular situation, to object at any time to the processing of your personal data which is based on the letter (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

  Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing, which includes profiling to the extent that it is related to such direct marketing.

• Right of withdrawal for consents: You have the right to revoke consents at any time.
• Right of access: You have the right to request confirmation as to whether the data in question will be processed and to be informed of this data and to receive further information and a copy of the data in accordance with the provisions of the law.
• Right to rectification: You have the right, in accordance with the law, to request the completion of the data concerning you or the rectification of the incorrect data concerning you.
• Right to Erasure and Right to Restriction of Processing: In accordance with the statutory provisions, you have the right to demand that the relevant data be erased immediately or, alternatively, to demand that the processing of the data be restricted in accordance with the statutory provisions.
• Right to data portability: You have the right to receive data concerning you which you have provided to us in a structured, common, and machine-readable format in accordance with the legal requirements, or to request its transmission to another controller.
• Complaint to the supervisory authority: You also have the right, under the conditions laid down by law, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Terminology and Definitions

This section provides an overview of the terms used in this privacy policy. Many of the terms are drawn from the law and defined mainly in Article 4 GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended above all for the purpose of comprehension. The terms are sorted alphabetically.

• Affiliate Tracking: Affiliate tracking logs links that the linking websites use to refer users to websites with products or other offers. The owners of the respective linked websites can receive a commission if users follow these so-called "affiliate links" and subsequently take advantage of the offers (e.g. buy goods or use services). To this end, it is necessary for providers to be able to track whether users who are interested in certain offers subsequently follow the affiliate links. It is, therefore, necessary for the functionality of affiliate links that they are supplemented by certain values that become part of the link or are otherwise stored, e.g. in a cookie. The values include in particular the source website (referrer), time, an online identification of the owner of the website on which the affiliate link was located, an online identification of the respective offer, an online identifier of the user, as well as tracking specific values such as advertising media ID, partner ID, and categorizations
• Click tracking: Click tracking allows users to keep track of their movements within an entire website. Since the results of these tests are more accurate if the interaction of the users can be followed over a certain period of time (e.g. if a user likes to return), cookies are usually stored on the computers of the users for these test purposes.
• Content Delivery Network (CDN): A "Content Delivery Network" (CDN) is a service with whose help contents of our online services, in particular large media files, such as graphics or scripts, can be delivered faster and more securely with the help of regionally distributed servers connected via the Internet.
• Controller: "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
• Conversion tracking: Conversion tracking is a method used to evaluate the effectiveness of marketing measures. For this purpose, a cookie is usually stored on the devices of the users within the websites on which the marketing measures take place and then called up again on the target website (e.g. we can thus trace whether the advertisements placed by us on other websites were successful).
• Cross-Device Tracking: Cross-Device Tracking is a form of tracking in which behavior and interest information of the user is recorded across all devices in so-called profiles by assigning an online identifier to the user. This means that user information can usually be analyzed for marketing purposes, regardless of the browser or device used (e.g. mobile phone or desktop computer). With most Cross-Device Tracking providers, the online identifier is not linked to plain data such as names, postal addresses, or e-mail addresses.
• Custom Audiences: Target group formation (or "custom audiences") is the term used when target groups are determined for advertising purposes, e.g. display of advertisements. For example, a user's interest in certain products or topics on the Internet may be used to infer that that user is interested in advertisements for similar products or the online store in which they viewed the products. Lookalike Audiences" (or similar target groups) is the term used to describe content that is viewed as suitable by users whose profiles or interests presumably correspond to the users for whom the profiles were created. Cookies are generally used for the purposes of creating custom audiences and lookalike audiences. Target groups can be created by processing visitors of an online service or can be uploaded to the provider of online marketing technology by means of uploading (which is usually done pseudonymized).
• IP Masking: IP masking is a method by which the last octet, i.e. the last two numbers of an IP address, are deleted so that the IP address alone can no longer be used to uniquely identify a person. IP masking is therefore a means of pseudonymizing processing methods, particularly in online marketing.
• Interest-based and behavioral marketing: Interest-related and/or behavior-related marketing is the term used when potential user interest in advertisements and other content is predicted if possible. This is done on the basis of information on the previous behavior of users (e.g. visiting and staying on certain websites, purchasing behavior or interaction with other users), which is stored in a so-called profile. For these purposes, cookies are usually used.
• Location data: Location data is created when a mobile device (or another device with the technical requirements for a location determination) connects to a radio cell, a WLAN or similar technical means and functions of location determination. Location data serve to indicate the geographically determinable position of the earth at which the respective device is located. Location data can be used, for example, to display map functions or other information dependent on a location.
• Personal Data: "personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Processing: The term "processing" covers a wide range and practically every handling of data, be it a collection, evaluation, storage, transmission, or erasure.
• Profiling: "Profiling" means any automated processing of personal data consisting in the use of such personal data to analyze, evaluate or predict certain personal aspects relating to a natural person (depending on the type of profiling, this includes information regarding age, gender, location, and movement data, interaction with websites and their contents, shopping behavior, social interactions with other people) (e.g. interests in certain contents or products, click behavior on a website or the location). Cookies and web beacons are often used for profiling purposes.
• Remarketing: Remarketing" or "retargeting" is the term used, for example, to indicate for advertising purposes which products a user is interested in on a website in order to remind the user of these products on other websites, e.g. in advertisements.
• Targeting: Tracking" is the term used when the behavior of users can be traced across several websites. As a rule, behavior, and interest information with regard to the websites used is stored in cookies or on the servers of the tracking technology providers (so-called profiling). This information can then be used, for example, to display advertisements to users presumably corresponding to their interests.
• Web Analytics: Web Analytics serves the evaluation of visitor traffic of online services and can determine their behavior or interests in certain information, such as the content of websites. With the help of web analytics, website owners, for example, can recognize at what time visitors visit their website and what content they are interested in. This allows them, for example, to optimize the content of the website to better meet the needs of their visitors. For purposes of web analytics, pseudonymous cookies and web beacons are frequently used in order to recognize returning visitors and thus obtain more precise analyses of the use of an online service.