1. Objective and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Cookies, reach measurement & online bookings
6. Google Analytics
7. Google re/marketing services
8. Facebook social plugins
9. Facebook remarketing
10. Integration of third-party services and content
11. User rights and deletion
12. Changes to the privacy policy
13. Image credits
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
This privacy policy explains the nature, scope and purpose of the processing (including collection, processing and use, as well as obtaining consent) of personal data within our online offering and the associated websites, functions and content (hereinafter collectively referred to as the ‘online offering’ or ‘website’). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used to run the online offering. The provider of the online offering and the body responsible for data protection is Forsthaus Heiligenberg Gastgeber GmbH, Heiligenberg 3, 27305 Bruchhausen-Vilsen (hereinafter referred to as ‘provider’, “we” or ‘us’). For contact details, please refer to our legal notice. The term ‘user’ refers to all customers and visitors to our online service. The terms used, such as ‘user’, are to be understood as gender-neutral.
We process users' personal data only in compliance with the relevant data protection regulations in accordance with the principles of data minimisation and data avoidance. This means that users' data is only processed if there is legal permission to do so, in particular if the data is necessary for the provision of our contractual services and online services, or if it is required by law, or if consent has been given. We take organisational, contractual and technical security measures in line with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. If, within the scope of this privacy policy, content, tools or other means from other providers (hereinafter collectively referred to as ‘third-party providers’) are used and their registered office is abroad, it can be assumed that data will be transferred to the countries where the third-party providers are based. The transfer of data to third countries is based either on legal permission, the consent of the users or special contractual clauses that guarantee the security of the data as required by law.
Die personenbezogenen Daten werden, neben den ausdrücklich in dieser Datenschutzerklärung genannten Verwendung, für die folgenden Zwecke auf Grundlage gesetzlicher Erlaubnisse oder Einwilligungen der Nutzer verarbeitet: – Die Zurverfügungstellung, Ausführung, Pflege, Optimierung und Sicherung unserer Dienste-, Service- und Nutzerleistungen; – Die Gewährleistung eines effektiven Kundendienstes und technischen Supports. Wir übermitteln die Daten der Nutzer an Dritte nur, wenn dies für Abrechnungszwecke notwendig ist (z.B. an einen Zahlungsdienstleister) oder für andere Zwecke, wenn diese notwendig sind, um unsere vertraglichen Verpflichtungen gegenüber den Nutzern zu erfüllen (z.B. Adressmitteilung an Lieferanten). Bei der Kontaktaufnahme mit uns (per Kontaktformular oder Email) werden die Angaben des Nutzers zwecks Bearbeitung der Anfrage sowie für den Fall, dass Anschlussfragen entstehen, gespeichert. Personenbezogene Daten werden gelöscht, sofern sie ihren Verwendungszweck erfüllt haben und der Löschung keine Aufbewahrungspflichten entgegenstehen.
Wir erheben Daten über jeden Zugriff auf den Server, auf dem sich dieser Dienst befindet (so genannte Serverlogfiles). Zu den Zugriffsdaten gehören Name der abgerufenen Webseite, Datei, Datum und Uhrzeit des Abrufs, übertragene Datenmenge, Meldung über erfolgreichen Abruf, Browsertyp nebst Version, das Betriebssystem des Nutzers, Referrer URL (die zuvor besuchte Seite), IP-Adresse und der anfragende Provider. Wir verwenden die Protokolldaten ohne Zuordnung zur Person des Nutzers oder sonstiger Profilerstellung entsprechend den gesetzlichen Bestimmungen nur für statistische Auswertungen zum Zweck des Betriebs, der Sicherheit und der Optimierung unseres Onlineangebotes. Wir behalten uns jedoch vor, die Protokolldaten nachträglich zu überprüfen, wenn aufgrund konkreter Anhaltspunkte der berechtigte Verdacht einer rechtswidrigen Nutzung besteht.
Cookies sind Informationen, die von unserem Webserver oder Webservern Dritter an die Web-Browser der Nutzer übertragen und dort für einen späteren Abruf gespeichert werden. Über den Einsatz von Cookies im Rahmen pseudonymer Reichweitenmessung werden die Nutzer im Rahmen dieser Datenschutzerklärung informiert. Die Betrachtung dieses Onlineangebotes ist auch unter Ausschluss von Cookies möglich. Falls die Nutzer nicht möchten, dass Cookies auf ihrem Rechner gespeichert werden, werden sie gebeten die entsprechende Option in den Systemeinstellungen ihres Browsers zu deaktivieren. Gespeicherte Cookies können in den Systemeinstellungen des Browsers gelöscht werden. Der Ausschluss von Cookies kann zu Funktionseinschränkungen dieses Onlineangebotes führen. Es besteht die Möglichkeit, viele Online-Anzeigen-Cookies von Unternehmen über die US-amerikanische Seite http://www.aboutads.info/choices oder die EU-Seite http://www.youronlinechoices.com/uk/your-ad-choices/ zu verwalten.
Verwendung des Onlinebuchungstools DIRS21 der TourOnline AG
Unsere Onlinepräsenz verwendet zur Ermöglichung der Onlinebuchungen von Unterkunftsleistungen und sonstigen Reiseleistungen, sowie zur Abwicklungen von Anfragen das Onlinebuchungstool DIRS21 (nachfolgend „OBT“) der Firma TourOnline AG, Borsigstraße 26, 73249 Wernau, Deutschland (www.dirs21.de, nachfolgend „TOAG“). Im Rahmen des OBT verarbeitet die TOAG die Daten als Verantwortlicher. Die Hinweise und Bestimmungen zum Datenschutz finden Sie in der Datenschutzerklärung der TOAG zum OBT, welche Sie jederzeit aus dem OBT heraus aufrufen können oder unter www.dirs21.de/datenschutz einsehen können.
We use Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transferred to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with further services associated with the use of this online offering and the Internet. In doing so, pseudonymous user profiles of users can be created from the processed data. We only use Google Analytics with IP anonymisation enabled. This means that the IP address of users will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online service, as well as Google from processing this data, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on the use of data for advertising purposes by Google, settings and options for objection can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners(‘Data use by Google when you use our partners' websites or apps’), http://www.google.com/policies/technologies/ads (‘Data use for advertising purposes’), http://www.google.de/settings/ads (‘Manage information that Google uses to show you ads’) and http://www.google.com/ads/preferences (‘Determine which ads Google shows you’).
We use the marketing and remarketing services (hereinafter referred to as ‘Google Marketing Services’) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner, so that users are only presented with advertisements that potentially match their interests. If, for example, users are shown advertisements for products that they have shown interest in on other websites, this is referred to as ‘remarketing’. For these purposes, when our website and other websites on which Google Marketing Services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as ‘web beacons’) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com.
This file records which websites the user has visited, which content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visit time and other information about the use of the online offer. The user's IP address is also recorded, whereby we would like to point out that, within the framework of Google Analytics, the IP address is truncated within member states of the European Union or in other signatory states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and truncated there. The IP address is not merged with user data within other Google services. The above-mentioned information may also be linked to information from other sources. When the user subsequently visits other websites, advertisements tailored to their interests may be displayed. User data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process the name or email address of users, for example, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. This means that, from Google's point of view, the advertisements are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who that is.
This does not apply if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected by ‘DoubleClick’ about users is transmitted to Google and stored on Google's servers in the USA. The Google marketing services we use include the online advertising programme ‘Google AdWords’. In the case of Google AdWords, each AdWords customer receives a different ‘conversion cookie’. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. We integrate third-party advertisements based on the Google marketing service ‘DoubleClick’. DoubleClick uses cookies that enable Google and its partner websites to place advertisements based on users' visits to this website or other websites on the Internet. We also integrate third-party advertisements based on the Google marketing service ‘AdSense’.
AdSense uses cookies that enable Google and its partner websites to display advertisements based on users' visits to this website or other websites on the Internet. Another Google marketing service we use is ‘Google Tag Manager’, which allows us to integrate additional Google analysis and marketing services into our website (e.g. ‘AdWords’, “DoubleClick” or ‘Google Analytics’). For more information on Google's use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads. Google's privacy policy is available at https://www.google.com/policies/privacy. If you wish to object to collection by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
Our online offering uses social plugins (‘plugins’) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). The plugins can be recognised by one of the Facebook logos (white ‘f’ on a blue tile, the terms ‘Like’, “Like” or a ‘thumbs up’ sign) or are marked with the addition ‘Facebook Social Plugin’. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/. When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to the user's device and integrated into the online service. The processed data can be used to create user usage profiles. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, Facebook receives the information that they have accessed the corresponding page of the online offer.
If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/. If a user is a Facebook member and does not want Facebook to collect data about them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
Within our online offering, we use so-called ‘Facebook pixels’ from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). With the help of the Facebook pixel, Facebook is able to determine the visitors to our website as a target group for the display of advertisements, so-called ‘Facebook ads’. Accordingly, we use the Facebook pixel to display the Facebook ads we place only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of users and do not appear annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad. The Facebook pixel is integrated directly by Facebook when you visit our website and can store a so-called cookie, i.e. a small file, on your device.
If you then log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. Facebook processes the data in accordance with Facebook's data use policy. Accordingly, you can find further information on how the remarketing pixel works and on the display of Facebook ads in general in Facebook's data use policy: https://www.facebook.com/policy.php. You can object to the collection of data by the Facebook pixel and the use of your data for the display of Facebook ads. To do so, you can visit the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or declare your objection via the US page http://www.aboutads.info/choices/oder or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into our online offering. The integration of third-party content always requires that the third-party providers perceive the IP address of the users, as they would not be able to send the content to the users' browsers without the IP address. The IP address is therefore necessary for the display of this content. Furthermore, the providers of third-party content may set their own cookies and process user data for their own purposes. In doing so, user profiles may be created from the processed data. We will use this content as sparingly as possible and avoid data collection, and we will select reliable third-party providers with regard to data security. The following overview provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases, already mentioned here, options for objection (so-called opt-out): – OpenStreetMap. We use the map service provided by OpenStreetMap (OSM). We integrate the map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
The United Kingdom is considered a third country with adequate data protection. This means that the United Kingdom has a level of data protection that is equivalent to that of the European Union. When using OpenStreetMap maps, a connection is established to the servers of the OpenStreetMap Foundation. Among other things, your IP address and other information about your behaviour on this website may be forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use similar recognition technologies for this purpose.
OpenStreetMap is used in the interest of an appealing presentation of our online offerings and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
– Videos from the ‘YouTube’ platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
Users have the right to request information free of charge about the personal data we have stored about them. In addition, users have the right to correct inaccurate data, revoke consent, block and delete their personal data, and, in the event of unlawful data processing, lodge a complaint with the competent supervisory authority. The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing deletion.
We reserve the right to change the privacy policy in order to adapt it to changed legal situations or in the event of changes to the service or data processing. However, this only applies to statements on data processing. If the consent of users is required or if parts of the privacy policy contain provisions of the contractual relationship with users, changes will only be made with the consent of the users. Users are requested to regularly inform themselves about the content of the privacy policy. Status: 23 May 2018, 3:25 p.m.
Jan Brockhaus, Berlin
Matthias Krause, Bremen
Armin Reichelt, Bruchhausen-Vilsen
Schwöbel, Rehburg – Loccum
Sylvia Fricke, Nienburg
Fotostudio Behrens, Affinghausen
Luzie Tiesing, Syke
Maren van Meer Fotodesign, Bücken
Spotlight Marketing GmbH, Bremen