This is an English translation provided for your convenience. The legally binding version is the German original, which you can find here. In case of any discrepancy, the German version prevails.
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data here means all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Draussenliebe GmbH, Katharinenweg 1, 53859 Niederkassel, Germany, tel.: +49 2208 9145580, email: hallo@matsch-und-piste.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
When you use our website purely for information purposes, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent, in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. We do, however, reserve the right to check the server log files retrospectively should there be concrete indications of unlawful use.
3) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie.
Insofar as personal data is also processed by individual cookies we have implemented, the processing is carried out in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit.
We may cooperate with advertising partners who help us make our online offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). Where we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
When you contact us (e.g. via the contact form or by email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry, or for contacting you, and for the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been dealt with conclusively; this is the case when it can be inferred from the circumstances that the matter concerned has been finally clarified, provided that there are no statutory retention obligations to the contrary.
We use the CRM system “Zendesk” from the provider Zendesk, Inc., 989 Market Street #300, San Francisco, CA 94102, USA, in order to process users’ email enquiries more quickly and efficiently (legitimate interest under Art. 6(1)(f) GDPR). Zendesk is certified under the Privacy Shield agreement and thereby offers an additional guarantee of complying with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active).
All the information you send us by email is stored in the ticket system, as is your email address. Zendesk strictly complies with the GDPR. You can find out more here and here.
If users do not agree with data being collected and stored in Zendesk’s external system, we offer them alternative ways to submit service enquiries: by telephone or post.
If you are a business partner, your data may be stored in a customer relationship management system (“CRM system”) or comparable enquiry management system.
We delete enquiries once they are no longer required. We review whether they are still required every two years; furthermore, the statutory archiving obligations apply.
5) Use of your data for direct advertising
5.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory detail for sending the newsletter is your email address. Providing any further data is voluntary and is used so that we can address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving newsletters. We then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you wish to receive newsletters in future.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you subscribe to the newsletter, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of subscription, so that we can trace any possible misuse of your email address at a later point in time. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter, or by sending a corresponding message to the controller named at the outset. After you unsubscribe, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.
5.2 Newsletter delivery via MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we pass on the data you provided when subscribing to the newsletter. This transfer is carried out in accordance with Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is generally transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically analyse the newsletters on our behalf. For the analysis, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message was opened and which links were clicked, if any. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; a direct link to a person is ruled out. This data serves solely the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, MailChimp may use this data in accordance with Art. 6(1)(f) GDPR on the basis of its own legitimate interest in the needs-based design and optimisation of the service as well as for market research purposes, for example to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with MailChimp based on the standard contractual clauses of the European Commission, in order to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed, if you are interested, at the following internet address: https://mailchimp.com/legal/data-processing-addendum/.
MailChimp is also certified under the US-European data protection agreement “Privacy Shield” and thereby undertakes to comply with the EU data protection requirements.
You can view MailChimp’s data protection provisions here: https://mailchimp.com/legal/privacy/
6) Online marketing
Use of affiliate programmes
– Amazon Associates programme (AmazonPartnerNet)
We participate in the “AmazonPartnerNet” partner programme of Amazon EU S.a.r.l., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter “Amazon”). In this context, we have placed advertisements as links on our website that lead to offers on various Amazon websites. Amazon uses cookies, which are small text files stored on your device, in order to trace the origin of orders generated via such links. Among other things, this allows Amazon to recognise that you clicked the partner link on our website. This information is required for payment processing between us and Amazon. Insofar as the information also contains personal data, the processing described is carried out on the basis of our legitimate financial interest in the settlement of commission payments with Amazon in accordance with Art. 6(1)(f) GDPR.
You can find further information on Amazon’s use of data in the Amazon.de privacy policy at http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
If you wish to block the analysis of user behaviour via cookies, you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. You can also deactivate interest-based advertising at Amazon via the link http://www.amazon.de/gp/dra/info.
7) Web analytics services
Google (Universal) Analytics
– Google Universal Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your shortened IP address) is generally transferred to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by truncating it and rules out any direct link to a person. Through this extension, your IP address is truncated by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services associated with website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent collection by Google Analytics within this website in future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will have to click this link again): Deactivate Google Analytics
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your use in your customer account under “My data”, “Personal data”.
You can find more information on the handling of user data with Google Analytics in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
8) Tools and miscellaneous
Google Web Fonts
To ensure a uniform display of fonts, this page uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google’s servers. Through this, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font is used by your computer.
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU.
You can find further information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
9) Rights of the data subject
9.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access under Art. 15 GDPR: in particular, you have a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, and complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed which guarantees exist under Art. 46 GDPR when your data is transferred to third countries;
- Right to rectification under Art. 16 GDPR: you have a right to the immediate rectification of incorrect data concerning you and/or the completion of your incomplete data stored by us;
- Right to erasure under Art. 17 GDPR: you have the right to demand the erasure of your personal data if the requirements of Art. 17(1) GDPR are met. However, this right does not exist in particular where processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- Right to restriction of processing under Art. 18 GDPR: you have the right to demand the restriction of the processing of your personal data for as long as the accuracy of your data that you dispute is being verified, if you refuse the erasure of your data due to unlawful data processing and instead demand the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation for as long as it has not yet been established whether our legitimate grounds override yours;
- Right to be informed under Art. 19 GDPR: if you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you was disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability under Art. 20 GDPR: you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to demand its transmission to another controller, insofar as this is technically feasible;
- Right to withdraw consent given under Art. 7(3) GDPR: you have the right to withdraw consent to the processing of data once given at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal;
- Right to lodge a complaint under Art. 77 GDPR: if you are of the opinion that the processing of the personal data concerning you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement.
9.2 RIGHT TO OBJECT
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
10) Duration of storage of personal data
The duration of storage of personal data is determined on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law). After the period expires, the corresponding data is routinely deleted, provided it is no longer required for the performance of a contract or the initiation of a contract and/or we no longer have a legitimate interest in continued storage.
Cookies and reporting of access figures
We use “session cookies” from VG Wort, Munich, to measure access to texts in order to record the copy probability. Session cookies are small units of information that a provider stores in the working memory of the visitor’s computer. A session cookie stores a randomly generated unique identification number, a so-called session ID. A cookie also contains information about its origin and its storage period. Session cookies cannot store any other data. These measurements are carried out by Kantar Germany GmbH using the Scalable Central Measurement Method (Skalierbares Zentrales Messverfahren, SZM). They help to determine the copy probability of individual texts for the remuneration of statutory claims of authors and publishers. We do not collect any personal data via cookies.
Many of our pages contain JavaScript calls through which we report access figures to the collecting society Verwertungsgesellschaft Wort (VG Wort). We thereby make it possible for our authors to participate in the distributions of VG Wort, which ensure the statutory remuneration for the use of copyright-protected works in accordance with Section 53 of the German Copyright Act (UrhG).
Our offering can also be used without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.
Privacy policy for the use of the Scalable Central Measurement Method
Our website and our mobile web offering use the “Scalable Central Measurement Method” (SZM) of Kantar Germany GmbH to determine statistical parameters for ascertaining the copy probability of texts.
In doing so, anonymous measured values are collected. To recognise computer systems, the access figure measurement uses either a session cookie or a signature created from various pieces of information transmitted automatically by your browser. IP addresses are only processed in anonymised form.
The method was developed with data protection in mind. The sole aim of the method is to determine the copy probability of individual texts.
At no point are individual users identified. Your identity always remains protected. You do not receive any advertising through the system.