- General information:
We are very pleased about your interest in our website. The use of this website is usually possible without providing personal data. However, if you make use of certain services of our company via our website, it may be necessary to process personal data. If this is the case and there is no legal basis for such processing, we will always obtain your consent.
As the operator of this website, we have implemented numerous technical and organizational measures to ensure that your personal data processed via this website is protected as completely as possible. However, data transmissions on the Internet may have security gaps, so that we cannot guarantee absolute protection.
81379 Munich, Germany
Phone: +49 (0)176 32131415
Contact data protection officer According to article 37 DSGVO we are not obliged to appoint a data protection officer. Nevertheless, we make sure that the legal regulations are observed. If you wish to claim any of the rights listed below or have any questions about data protection, simply write to us at email@example.com
- What exactly is personal data
Personal data is information that can be used to find out personal or factual information about you. Information where we cannot (or only with a disproportionate effort) establish a connection to your person, e.g. by pseudonymising or anonymising the information, is not personal data.
- Which data are collected and processed by us?
As soon as you call up our website or our website is called up by an automated system, a series of general data and information is collected, which is stored in the log files of the server. This includes the following data and information:
- the date and time of an access to our website
- the Internet Protocol address (IP address) of the requesting computer
- the Internet service provider of the accessing system
- the browser types and versions used
- the operating system used by the accessing system
- the website from which an accessing system accesses our website (so-called referrer)
- the sub-websites that are accessed via an accessing system on our website
- as well as other similar data and information that serve to avert danger in the event of attacks on our information technology systems
When using this general data and information, no personal evaluation takes place, i.e. we do not draw any conclusions about you or your person. Rather, we use this information to improve our website and its contents as well as the advertising for it on the one hand, and to be able to guarantee the functionality of our information technology systems and the technology of our website in the long term as well as to provide law enforcement agencies with the information necessary for prosecution in the event of a cyber attack.
For this reason, this anonymously collected data and information is evaluated statistically on the one hand and also with the aim of increasing data protection and data security in our company in order to ensure an optimum level of protection for the personal data processed by us.
These anonymous data and information of the server log files are also stored separately from all personal data provided by you.
Our website uses SSL (Secure Socket Layer) encryption for the transmission of data from your browser to our server and to servers that provide files that we embed on our website. With SSL, data is transmitted in an encrypted form. The data cannot be altered and the sender can be identified. You can recognise the presence of SSL encryption by the prefixed text “https” in front of the address of the website you are visiting in your browser.
- Data deletion and storage duration
Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies or if this has been provided for by the European Directives and Regulations or any other legislator in laws or regulations to which we as a company are subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data in order to conclude or fulfill a contract.
- Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO,
- the transfer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary to safeguard our legitimate interests or to safeguard the legitimate interests of third parties and there is no reason to assume that you have an overriding interest worthy of protection in not passing on your data,
- in the event that the transfer in accordance with Art. 6 paragraph 1 sentence 1 lit. c DSGVO and
- this is permitted by law and is necessary for the processing of contractual relationships with you in accordance with Art. 6 paragraph 1 sentence 1 lit. b DSGVO.
If you wish, you can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. In addition, you can delete cookies already set at any time using an internet browser or other software programs. This is possible in all common internet browsers. Should you actually deactivate the setting of cookies in the Internet browser used, it is possible that not all functions of our website can be fully used.
7. Contact form
You have the possibility to contact us via a contact form on our website. In this case, we will collect your first name and your e-mail address as well as your last name, your address and your telephone number for the purpose of contacting you and providing the respective services. The personal data you enter is collected and stored exclusively for internal use and for our own purposes. As a matter of principle, this data is not passed on to third parties, unless there is a legal obligation to do so or the passing on of such data serves criminal or legal prosecution.
However, if, for example, you order products via our website, this data may be passed on to one or more processors, for example to a parcel service provider, who will also use the personal data exclusively for internal use attributable to the person responsible for the processing.
Any use of personal data beyond this will not take place or will only take place with your prior consent. Personal data will be deleted as soon as they are no longer required for the purpose of the storage.
8. Comment function on our website
Furthermore, you have the possibility on our website to make comments, for example under contributions. In addition to your comment, we also store information about the time of creation of your comment, your e-mail address and, if you are not anonymous, your chosen user name.
Subscribing to comments
As a user of our website you can also subscribe to comments after you have registered. You will receive a confirmation email with which we will check whether you are really the owner of the email address provided. However, you can unsubscribe from this function at any time via a link in our newsletter.
Information about the newsletter and consent
The following information will inform you about the contents of our newsletter, the registration, dispatch and statistical evaluation procedure as well as your right to object. By subscribing to our newsletter, you agree to receive it and to the described procedures.
Use of the dispatch service providers MailChimp and ActiveCampaign
The collection of our newsletter subscribers as well as the dispatch of our newsletters is carried out via MailChimp and ActiveCampaign. MailChimp is a newsletter dispatch platform of the US provider Rocket Science Group, LLC, located at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, United States. ActiveCampaign, LLC, is also a newsletter distribution platform based at 1 N Dearborn, 5th Floor, Chicago, IL 60601, United States.
The e-mail addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of MailChimp and ActiveCampaign in the United States.
MailChimp and ActiveCampaign use this information to send and evaluate the newsletter on our behalf. Furthermore, according to their own information, MailChimp and ActiveCampaign may use this data to optimise or improve their own services, e.g. to technically optimise the sending and presentation of the newsletters or for economic purposes to determine the countries from which the recipients come. However, MailChimp and ActiveCampaign do not use the data of our newsletter recipients to write to them themselves or pass it on to third parties.
We trust in the reliability and the IT and data security of MailChimp and ActiveCampaign. Both companies are certified under the US-EU Privacy Agreement “Privacy Shield” and thus undertake to comply with EU data protection regulations.
Furthermore, we have concluded a so-called “Data-Processing-Agreement” with both MailChimp and ActiveCampaign. This is a contract in which the companies undertake to protect the data of our users, to process it on our behalf in accordance with their data protection regulations and in particular not to pass it on to third parties. Under the following links you can view the data protection regulations of both companies:
Content of the newsletter
We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletter”) only with the consent of the recipients or with a legal permission. Insofar as the contents of the newsletter are specifically described in the context of a registration for the newsletter, they are decisive for the consent of the users.
Our newsletters should above all be fun and offer you added value. In particular, we send out information on travel and outdoor topics (this includes references to articles, advertisements, white papers or online presentations).
Double-Opt-In and logging
The registration for our newsletter is done in a so-called Double-Opt-In procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses.
The newsletter registrations are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored with MailChimp and ActiveCampaign are also logged.
To subscribe to our newsletter, it is sufficient to enter your e-mail address.
In order to receive even more personalised newsletters from us, you can also enter your first and last name and, if applicable, your date of birth and gender. We only use this information to better tailor the content of the newsletter to your interests. In exceptional cases, such as for certain promotions, we also ask for your address to enable us to send the newsletter. The addresses generated in this way are only used for the respective action and are not used for any other purpose.
Statistical collection and analyses
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the servers of MailChimp and ActiveCampaign when the newsletter is opened. As part of this retrieval, technical information such as information about your browser and your system, as well as your IP address and the time of your retrieval are initially collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times.
The statistical surveys also include determining whether and when the newsletters are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of MailChimp or ActiveCampaign to observe individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Online access and data management
There are cases where we direct newsletter recipients to the websites of MailChimp or ActiveCampaign. For example, our newsletters contain a link with which newsletter recipients can call up the newsletters online (e.g. in the event of display problems in the email programme). Furthermore, newsletter recipients can subsequently correct their data, such as the e-mail address. Likewise, the data protection declarations of MailChimp and ActiveCampaign are only available on their website.
In addition, we would like to draw your attention to the fact that cookies are also used on the websites of MailChimp and ActiveCampaign and thus personal data is processed by MailChimp and ActiveCampaign as well as their partners and service providers (such as Google Analytics). We have no influence on this data collection. You can find more information about this in the privacy statements of MailChimp and ActiveCampaign.
How you can cancel/cancel the newsletter
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. This will also terminate your consent to the sending of the newsletter via MailChimp and ActiveCampaign as well as the statistical analyses. A separate revocation of the dispatch via MailChimp and ActiveCampaign or the statistical analysis is not possible.
You will find a link to cancel the newsletter at the end of each newsletter.
Legal basis GDPR
In accordance with the requirements of the General Data Protection Regulation (GDPR) applicable as of 25 May 2018, we inform you that the consent to the sending of e-mail addresses is based on Art. 6 Para. 1 lit. a, 7 DSGVO as well as § 7 Para. 2 No. 3, or Para. 3 UWG. The use of the dispatch service providers MailChimp and ActiveCampaign, the performance of statistical surveys and analyses, as well as the logging of the registration process, are based on our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.
We would also like to point out that you can object to the future processing of your personal data in accordance with the legal requirements pursuant to Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct advertising purposes.
- External tools
Use of Google Analytics
You can object to the collection of data by Google Analytics with effect for the future by installing a deactivation add-on for your browser.
Use of Facebook Social Plugins
Our website also uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are recognisable by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or by the addition “Facebook Social Plugin”. You can see the list and the appearance of the Facebook social plugins here: https://developers.facebook.com/docs/plugins/
When you visit our website, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform you according to our state of knowledge:
By integrating the plugin, Facebook receives the information that you have accessed our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you use the plugins, such as clicking the Like button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out and store your IP address.
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your membership data stored on Facebook, you must log out of Facebook before visiting our website.
You also have the option of blocking Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker”.
Use of Facebook Custom Audience
Remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. When you visit our website, the remarketing tags establish a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our website with your IP address. This enables Facebook to associate your visit to our website with your user account. We can use the information obtained in this way to display Facebook Ads.
Jetpack (WordPress Stats)
We use the plugin Jetpack (WordPress Stats) on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO) the plugin Jetpack (here the sub-function “WordPress Stats”), which embeds a tool for the statistical analysis of visitor accesses and is operated by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.
Automattic is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active).
The information generated by the cookie about your use of our website is stored on a server in the USA. The processed data can be used to create user profiles, which are only used for analysis and not for advertising purposes. Further information can be found in the privacy statements of Automattic: https://automattic.com/privacy/ and notes on Jetpack cookies: https://jetpack.com/support/cookies/.
Our website uses SumoMe, a service provided by Sumo Group Inc, 1305 E. 6th St 3, Austin, TX 78702, USA. SumoMe uses, among other things, cookies which are stored on your computer and which allow an analysis of the use of the website. In the course of use, data, such as in particular the IP address and activities of the user, may be transmitted to a server of Sumo Group Inc. and stored there. Sumo Group Inc. may transfer this information to third parties where required to do so by law, or where such third parties process the information. You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of Java script in your browser or by installing a tool such as ‘NoScript’. Further information on data protection when using SumoMe can be found at the following link: http://www.appsumo.com/privacy/.
We use LeadDyno on our website to better understand what content might be of most interest to you. LeadDyno is a service provided by LeadDyno, LLC, 1600 H Street, Suite 409, Sacramento, CA 95814, USA. LeadDyno allows you to track links based on your previous interaction on partner websites.
Our website may contain automated affiliate marketing links. This means that we receive commissions on sales generated by links to products or services we write about. However, our editorial content is not influenced by merchants or affiliate partnerships.
- Transmission of data for orders and bookings on our website
We only transmit personal data to third parties if this is necessary within the framework of the contract processing, for example to the credit institute commissioned with the payment processing. Your data will not be transmitted further, for example for advertising purposes. You can object to the use of the e-mail address stored as part of the order at any time and free of charge. To do so, simply send an e-mail to firstname.lastname@example.org .
Encrypted payment transactions on this website
Payment transactions via the common means of payment (Visa/Mastercard, direct debit) are made exclusively via an encrypted SSL connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Button and widgets for PayPal (Paypal)
The PayPal button and widgets are services for interacting with the PayPal network of PayPal Inc. Personal data collected: Cookie and usage data.
Processing location: See the PayPal privacy statement: https://www.paypal.com/webapps/mpp/ua/privacy-full
On our website we offer, among other things, payment via Stripe. The provider of this payment service is Stripe Inc. with headquarters at 185 Berry Street, Suite 550, San Francisco, CA 94107, USA Contact in Germany: https://stripe.com/contact If you select payment via Stripe, the payment data you enter will be transmitted to Stripe. The transmission of your data to Stripe is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
12. Your rights
a) Right to confirmation
You have the right granted by the European Directive and Regulation to request confirmation from the controller as to whether personal data relating to you is being processed. If you wish to exercise this right of confirmation, you can contact us at any time.
b) Right of access
As a data subject of the processing of personal data, you have the right granted by the European Directive and Regulation to obtain at any time from the controller, free of charge, information about the personal data stored about you and a copy of that information. Furthermore, the European Directive and Regulation has granted you access to the following information:
- the purposes of the processing
- the categories of personal data processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to obtain the rectification or erasure of personal data concerning you, or to obtain the restriction of processing by the controller, or a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected from the data subject: Any available information on the origin of the data
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Furthermore, you have the right to be informed whether personal data have been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.
If you would like to make use of this right to information, you can contact us at any time.
c) Right to rectification
As a person affected by the processing of personal data, you have the right granted by the European Directive and Regulation to request the immediate rectification of any inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration – taking into account the purposes of the processing.
If you wish to make use of this right of rectification, you can contact us at any time.
d) Right to erasure (right to be forgotten)
As a person affected by the processing of personal data, you have the right granted by the European Directive and Regulation to request that the controller erases the personal data concerning you without delay, provided that one of the following reasons applies and insofar as the processing is not necessary:
- Your personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
- You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) DS-GVO or Art. 9(2)(a) DS-GVO and there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
- Your personal data has been processed unlawfully.
- The erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- Your personal data has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
If one of the aforementioned reasons applies, and you want to arrange for the deletion of personal data stored by my website, you can contact us at any time. We will then ensure that the request for deletion is complied with immediately.
If your personal data have been made public and our company as the controller is obliged to erase your personal data pursuant to Article 17 (1) of the Data Protection Regulation, reasonable measures, including technical measures, will be taken, taking into account the available technology and the cost of implementation, to inform other data controllers which process your published personal data that you have requested from them to erase all links to your personal data or copies or replications of such personal data, unless the processing is necessary. We will arrange the necessary in individual cases.
e) Right to restriction of processing
As a data subject of the processing of personal data, you have the right granted by the European Directive and Regulation to request the controller to restrict the processing if one of the following conditions is met:
- The accuracy of your personal data is contested by you for a period enabling the controller to verify the accuracy of your personal data.
- The processing is unlawful, you refuse to erase your personal data and instead request the restriction of the use of your personal data.
- The controller no longer needs your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
- You have objected to the processing pursuant to Art. 21 (1) DS-GVO and it is not yet clear whether the legitimate grounds of the controller outweigh yours.
If one of the above conditions is met and you wish to request the restriction of personal data stored by my website, you can contact us at any time. We will then arrange for the restriction of processing.
f) Right to data portability
As a data subject of the processing of personal data, you have the right granted by the European Directive and Regulation to receive the personal data concerning you, which has been provided by you to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom your personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have your personal data transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.
To assert the right to data portability, you can contact us at any time.
g) Right to revocation
As a person affected by the processing of personal data, you have the right granted by the European Directive and Regulation-maker to object at any time, on grounds arising from their particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DS-GVO. This also applies to profiling based on these provisions.
Your personal data will no longer be processed in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If your personal data is processed by me for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to the website owner to the processing for direct marketing purposes, the website owner will no longer process your personal data for these purposes.
In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you which is carried out by the Website Owner for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the Data Protection Regulation, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise your right to object, you can contact us directly. You are also free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.
h) Automated decisions in individual cases including profiling
As a data subject of personal data processing, you have the right granted by the European Directive and Regulation to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is necessary for the conclusion or performance of a contract between you and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and that law contains adequate measures to safeguard your rights and freedoms and legitimate interests, or (3) is made with your explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between you and the controller, or (2) is made with your explicit consent, the website owner shall take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the involvement of a person from the controller, to express your point of view and to contest the decision.
If you wish to exercise any rights in relation to automated decisions, you may contact us at any time.
i) Right to withdraw consent under data protection law
As a person affected by the processing of personal data, you have the right granted by the European Directive and Regulation to revoke your consent to the processing of your personal data at any time.
If you wish to exercise your right to withdraw your consent, you can contact us at any time.