Personal data (usually referred to just as "data" below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
I. Information about us
The party responsible for this website (the "controller") for purposes of data protection law is:
HVK Eching GmbH & Co. KG
Alexander & Herbert Krimmer
Obere Hauptstr. 10e
85386 Eching
Telephone: +49 (0)89 3191025
Telefax: +49 (0)89 3191027
E-Mail: info@boardinghaus-eching.de
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller's future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.
The data thus collected will be temporarily stored, but not in association with any other of your data.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within no more than 14 days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
Google Tag Manager
We use the Google Tag Manager service. "Google" is a group of companies and consists of the companies Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.
We've concluded a data processing agreement with Google. Google Tag Manager is an ancillary service that only processes personal data for technically essential purposes. It ensures other components are loaded, which may then collect data and use cookies. Google Tag Manager itself doesn't access this data.
However, please be aware that U.S. authorities, like intelligence agencies, might be able to access personal data exchanged with Google when you integrate this service. This is due to U.S. laws such as the Cloud Act.
Cookies
We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.
This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
a) Functional cookies
Functional cookies are cookies that ensure the proper functioning of the Website and their installation does not require your permission.
Consent Management
Our website uses cookie consent technology from “Complianz GDPR/CCPA Cookie Consent” in order to obtain your consent to the storage of specific cookies on your browser. The provider of this technology is Complianz BV, Atoomweg 6b, 9743 AK Groningen, Netherlands (hereinafter Complianz).
If you visit our website, Complianz cookies are saved on your browser and store the consent you have provided or your revocation of this consent. Complianz cookie consent technology is used to obtain statutory consent for the use of cookies. The legal basis for this is Article 6(1)(1)(c) GDPR.
Complianz provides further information with regard to its data protection practices at
https://complianz.io/privacy-statement.
b) Statistics
Statistics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
The Google Analytics service is used to analyze how our website is used. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our site.
Usage and user-related information, such as IP address, place, time, or frequency of your visits to our website will be transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization function, whereby Google truncates the IP address within the EU or the EEA before it is transmitted to the US.
The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and what visitors do once there. This data can also be used to provide other services related to the use of our website and of the internet in general.
Google states that it will not connect your IP address to other data. In addition, Google provides further information with regard to its data protection practices at
https://www.google.com/intl/de/policies/privacy/partners
including options you can exercise to prevent such use of your data.
In addition, Google offers an opt-out add-on at
https://tools.google.com/dlpage/gaoptout?hl=de
in addition with further information. This add-on can be installed on the most popular browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs Google Analytics' JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services we may use as detailed herein.
As an extension to Google Analytics 4, Google Signals can be used on this website.
If you gave permission for personalized ads in your Google account, your visitor data will be linked to your Google account and used for personalized advertising messages. Activating Google signals enables us to launch cross-device remarketing campaigns that would otherwise not be possible in this form. Remarketing means that we can also show you our offer on other websites.
In addition, the data collected by Google Analytics is complemented by other visitor data such as age, language, gender, search history, YouTube history. This information is helpful in order to understand the needs and interests of our target groups more precisely and to be able to optimally tailor our offer to them. This data is always aggregated and anonymized and never data of individual persons.
By default, the data of logged-in Google users expires after 26 months. You can manage or delete this data in your Google Account.
c) Marketing
Marketing cookies store information regarding visited websites of users. This data is used to display personalized advertisements tailored to user interests.
Google Maps
Our website uses Google Maps to display our location and to provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
If you access the Google Maps components integrated into our website, Google will store a cookie on your device via your browser. Your user settings and data are processed to display our location and create a route description. We cannot prevent Google from using servers in the USA.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.
By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions are transmitted.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser.
In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=en and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
YouTube
We use YouTube on our website. YouTube is a video portal provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube's "Enhanced Privacy Mode" to show you videos on our website. If you've given your consent for this processing, the legal basis is Art. 6 (1) lit. a GDPR. Alternatively, the legal basis may be Art. 6 (1) lit. f GDPR, as our legitimate interest lies in improving the quality of our website. According to YouTube, the "Enhanced Privacy Mode" ensures that the data detailed below is only transmitted to YouTube's servers when you actually start a video.
Without this "Enhanced Privacy Mode," a connection to YouTube's server in the USA is established as soon as you access one of our web pages that has a YouTube video embedded.
This connection is necessary to display the respective video on our website in your internet browser. In doing so, YouTube will collect and process at least your IP address, the date and time, and the website you visited. Additionally, a connection to Google's "DoubleClick" advertising network will be established.
If you're logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you'll need to either log out of YouTube before visiting our website or adjust the relevant settings in your YouTube user account.
For further information regarding the collection and use of data, as well as your rights and protection options, Google provides privacy notices available at https://policies.google.com/privacy.
Google Ads
This website uses Google Ads, an online advertising program from Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Ads to display advertisements in the Google search results or on third-party websites. This can happen when a user searches for specific terms (known as keyword targeting). We can also show targeted ads based on user data Google already has, such as location and interests (audience targeting). As website operator, we're able to quantitatively evaluate this data. For example, we can analyze which search terms led to our ads being shown and how many ads resulted in clicks.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
The data transfer to the USA is based on the European Commission's Standard Contractual Clauses. You can find details here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads Remarketing
This website may use the features of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads Remarketing helps us categorize people who interact with our online content into specific target audiences. We then use this to show them interest-based ads across the Google advertising network, a process known as remarketing or retargeting.
Furthermore, the advertising target groups created with Google Ads Remarketing can be linked with Google's cross-device functions. In this way, interest-based, personalized advertising messages, which have been adapted to you based on your previous usage and Browse behavior on one device (e.g., mobile phone), can also be displayed on another of your devices (e.g., tablet or PC).
If you have a Google account, you can object to personalized advertising using the following link:
https://www.google.com/settings/ads/onweb/.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
You can find further information and Google's privacy policy here:
https://policies.google.com/technologies/ads?hl=de.
Google Conversion-Tracking
This website may use Google Conversion Tracking, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Conversion Tracking to help Google and us understand if users have completed specific actions. For example, we can see how often certain buttons on our website are clicked, or which products are viewed or purchased most frequently. This information helps us create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We don't receive any information that personally identifies you. Google itself uses cookies or similar recognition technologies for identification purposes.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
More information on Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.
d) Disabling cookies
You can block cookies by adjusting your internet browser's settings. You can also delete cookies that have already been saved. However, the exact steps for these actions depend on the specific internet browser you use. If you have questions, please use your browser's help function or documentation, or contact its manufacturer or support. Please note that if you block cookies, it might limit the full functionality of our website.
Contact
If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content you send to us. You can recognize an encrypted connection by the lock symbol in the address bar of your browser.
We also offer the possibility to contact us via the messenger service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as WhatsApp, a subsidiary of Facebook. When the user communicates with the provider via WhatsApp, both the provider and WhatsApp receive the mobile phone number of the user and the information that the user has contacted the provider.
The abovementioned data are also forwarded by WhatsApp to Facebook servers in the USA and are processed by WhatsApp and Facebook in accordance with the WhatsApp privacy policy, which also includes processing for their own purposes, such as improving the WhatsApp service.
More information about the purpose and scope of the data collection and the further processing of these data by WhatsApp and Facebook as well as related rights and setting options for protecting privacy are contained in privacy guidelines from WhatsApp:
https://www.whatsapp.com/legal/#privacy-policy.
The legal basis for this processing and the transmission to WhatsApp is Article 6 para. 1 clause 1 b. GDPR, insofar as the establishment of contact relates to an existing contractual relationship or serves to initiate such a contractual relationship. If contact is not made for the above purposes, the legal basis is Article 6 para.1 lit. f GDPR. The legitimate interest of the provider is to improve the quality of service.
Social media links via graphics
We also promote our presence on several social media sites. The integration takes place via link or a linked graphic of the respective site.
Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.
Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.
The following social networks are integrated into our site by linked graphics:
Facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
Privacy Policy: https://www.facebook.com/policy.php
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy Policy: https://policies.google.com/privacy
Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.
Privacy Policy: https://help.instagram.com/519522125107875
Muster-Datenschutzerklärung der Anwaltskanzlei Weiß & Partner