Privacy Policy

DATA PROTECTION AND USE OF COOKIES Data protection declaration for the website of the Exaland GmbH, Wilhelm-Raabe-Str. 11, 38855 Wernigerode, Germany I. General Information When you visit our website, personal data is collected from you. These are data that are necessary so that you can use our Internet pages or which enable us to take your settings into account. In addition, this is information that you provide to us yourself via the contact options offered on these pages. We use this data to ensure the proper operation of our website and to answer your inquiries. In the following, we will inform you about which data is collected on our website and for what purposes the processing is carried out. We inform you about the use of so-called "cookies" and about the analysis tools used on our websites and the possibilities to allow or reject them. We will inform you about your rights and the contact details of our data protection officer at the end of this privacy policy. Cookies We use cookies. Cookies are text files that are stored on a computer system via an Internet browser and be saved. Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the visited Internet pages and servers to differ your individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified by the unique cookie ID. Through the use of cookies, we can provide the users of this website with more user-friendly services that are not available without the cookie setting. By means of a cookie the information and offers on our website can be optimized in the interests of the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter his access data every time he visits the website, because this is taken over by the website and the cookie stored on the user's computer system. You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable under certain circumstances. Server-Log-Files The provider of our website automatically collects and stores information in so-called server log files, which are stored by your browsers are automatically transmitted to us. The following can be recorded - browser types and versions used, - the operating system used by the accessing system, - the website from which an accessing system reaches our website (so-called referrers), - Sub-websites that are accessed via an accessing system on our website, - the date and time of access to the website, - an Internet protocol address (IP address), - the Internet service provider of the accessing system, and - other similar data and information that is necessary for security in the event of attacks on our information technology systems are used. When using these general data and information, we do not draw any conclusions about you. Rather, this information is needed in order to - to deliver the contents of our website correctly, - to optimize the content of our website as well as the advertising for it, - to ensure the long-term functionality of our information technology systems and the technology of our website, and - to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. Therefore, the GPL Times analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files will be stored separated from all of the personal data you have provided. This data will not be merged with other data sources. However, if there are indications of illegal use of our website, it is possible for us to subsequently subject this data to a review. Customers can register on our website You have the opportunity to register on our website by providing personal data. Which personal data is transmitted to us in this process is determined by the respective input mask used for registration. The personal data you have entered will be collected and stored exclusively for internal use by us and for our own purposes. However, we can pass on the information to one or several processors, for example a parcel service provider, who then also uses the personal data exclusively for an internal use that is attributable to us. By registering on our website, the IP address assigned to you, the date and time of registration are also stored. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and if necessary, this data makes it possible to clarify committed crimes. In this respect, the storage of this data is necessary for our security. A transfer of this data to third parties takes place in principle only if there is a legal obligation to disclose or the disclosure serves the purpose of criminal prosecution. Your registration takes place with the voluntary provision of personal data and serves us to provide you with content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons can in principle free change the personal data provided during registration at any time or to have it completely deleted from our database, unless the right to deletion is restricted by law. We will provide you with information about which personal data is stored about you at any time on request. Furthermore, we will correct or delete personal data at your request or request, unless the rights to correction or deletion are restricted by law. The data protection officer named by name in this data protection declaration and all of our employees are available to you as contact persons in this context. Newsletter Subscription 1. Newsletter subscription: On our website, users are given the opportunity to subscribe to our company’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the input mask. We inform our customers and business partners regularly by means of a newsletter about company’s offers. In principle, you can only receive our company's newsletter if - You have a valid e-mail address and - You have registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to an e-mail address registered for the first time for sending the newsletter in the double opt-in procedure. This confirmation e-mail is used to check whether the owner of the e-mail address as the data subject has authorized the receipt of the newsletter. When registering for the newsletter, we also store the IP address assigned to you as well as the date and time of registration. The collection of this data is necessary in order to be able to trace any misuse of the e-mail address of a data subject at a later date and therefore serves our legal protection. The personal data collected as part of a registration for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this regard, as this could be the case in the event of changes to the newsletter offer or in the event of changes in the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of personal data that you have given us for sending the newsletter can be revoked by you at any time. For the purpose of revoking consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on our website or to inform us of this in another way. 2. Newsletter Tracking: Our newsletters may contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails, which are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns be carried out. Based on the embedded tracking pixel, we can recognize whether and when an e-mail was opened by a recipient and which links in the e-mail were called up by the recipient. Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the recipients. This personal data will not be passed on to third parties. Data subjects are entitled at any time to revoke the respective separate declaration of consent issued via the double opt-in procedure. After a revocation, these personal data will be processed by the person responsible for the data input has been deleted, unless the right to deletion is restricted by law. We automatically interpret a withdrawal from the receipt of the newsletter as a revocation of consent. Contact form Due to legal regulations, our website contains information that enables a quick electronic contact to enable our company, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail or via a contact form, the personal data transmitted by you will be automatically stored. Such personal data transmitted on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties. Application opportunities We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing can also be carried out electronically. This is the case in particular if an applicant submits corresponding application documents to us by electronic means, for example by e-mail or via a web form on our website. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal regulations. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after the cancellation decision has been announced, provided that no other legitimate interests of ours stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG). If applicants and employers are interested in being included in an applicant pool and, accordingly, in a longer-term storage of the data, the corresponding consent of the applicant is required. In this case, the applicant will be informed about the company's privacy policy and the special provisions of the company's applicant data protection. Subsequently, in order to ensure traceability, a written declaration of consent to data processing for the purpose of the application will be obtained and at the same time the applicant will be informed about the possibility of revoking the consent at any time with effect for the future. Google Maps As part of our Internet offer, for example to find branches and / or locations of our company, the use of interactive maps of the map service "Google Maps API" of Google LLC takes place. The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA. When using this service, information about the use of the source website, as well as your IP address, is sent to Google LLC servers, transferred to the USA and stored. The implementing decision of the EU Commission 2016/1250 determines an appropriate level of data protection for the USA on the basis of the EU-US Privacy Shield. In principle, Google undertakes in its own data protection declaration not to pass on any information to third parties, However, exceptions are possible. A transfer of your data to third parties cannot be excluded by us, for example in the case of legally prescribed transfers or the processing of the data by third parties on behalf of Google LLC. You can find Google's privacy policy here: http://www.google.com/policies/privacy/ . If you do not want the data to be transferred, the map service can be deactivated and thus the transfer of data to Google LLC can be avoided. To do this, you must deactivate the Java script in the browser. II. External Services Profitroom Booking Engine and Booking mask We use the Profitroom Booking Engine of Profitroom GmbH, Potsdamer Platz 10/2, 10785 Berlin as a direct booking option on our websites. In the booking engine, only the data that is relevant for the provision of our service (fulfillment of the accommodation contract) are recorded and processed. Required information is marked as mandatory fields, voluntary information can, but in no case must be communicated by you. Further information can also be found in the privacy policy of Profitroom LLC: https://www.profitroom.de/de/privacy Facebook We have integrated components of the company Facebook on this website. Facebook is a social network. A social network is a social meeting place operated on the Internet, that is, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or allows the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos and network via friend requests, among other things. By clicking on third-party websites such as Facebook, you will be redirected to the respective third party, over which we have no control. Facebook's operating company is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller for the processing of personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Each time you access one of the individual pages of this website, which is operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on your system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Within the framework of this technical procedure Facebook receives information about which specific subpage of our website is visited by you. Facebook recognizes you every time you visit our website, if you are logged in to Facebook at the same time, and during the entire duration of your stay on our website, which specific subpage of our website you are visiting. Facebook collects this information through the Facebook component and through Facebook assigns to your Facebook account. If you click on one of the Facebook buttons integrated on our website, for example, the "Like" button, or if you leave a comment, Facebook assigns this information to your Facebook user account and stores this personal data. Depending on your Privacy settings may make your preferences visible to your Facebook friends. Facebook always receives information via the Facebook component that you are visiting our website if you are logged in to Facebook at the same time as accessing our website; this takes place regardless of whether you click on the Facebook component or not. If you do not want this information to be transmitted to Facebook in this way, you can prevent the transmission by logging out of your Facebook account before accessing our website. The data policy published by Facebook, which can be found at https://de-de.facebook.com/about/privacy /, there is Information about the collection, processing and use of personal data by Facebook. Furthermore, there will be explained, which setting options Facebook offers to protect your privacy. In addition, different applications that make it possible to suppress data transmission to Facebook, for example the Facebook blocker of the provider Webgraph, are available at http://webgraph.com/resources/facebookblocker /. Such applications can be used by you to suppress a data transmission to Facebook. Instagram We have integrated components of the Instagram service on our website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to disseminate such data on other social networks. The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Every time you visit one of the individual pages of our website on which an Instagram component (Insta button) has been integrated, the Internet browser on your system is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical process, Instagram receives information about which specific subpage of our website you are visiting. If you are logged in to Instagram at the same time, Instagram recognizes which specific subpage you are visiting each time you visit our website and for the entire duration of your stay on our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transmitted with it is assigned to your personal Instagram user account and stored and processed by Instagram. Instagram always receives information via the Instagram component that you have visited our website if you are logged in to Instagram at the same time when you visit our website; this happens regardless of whether you click on the Instagram component or not. If you do not want this information to be transmitted to Instagram, you can prevent the transmission by logging out of your Instagram account before accessing our website. Further information and Instagram's applicable data protection regulations can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/. Other providers If there are links to websites of other providers in addition to the information contained here, this data protection declaration does not apply to their content. The collection of data by the operators of the respective pages is beyond our knowledge and sphere of influence. Please note the data protection information of the respective page. III. Analysis tools Google Analytics (with anonymization function) [borlabs_cookie_opt_out tracking=“google-analytics“] We have integrated the Google Analytics component (with anonymization function) on our website, among other things we have implemented Google Optimize as a testing tool. Google Analytics is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behavior of visitors to websites. A web analysis service collects, among other things, data about which website a data subject came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. The operating company of the Google Analytics component is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide other services related to the use of our website. Google Analytics places a cookie in your system. Every time you access one of the individual pages of this website on which a Google Analytics component has been integrated, your Internet browser is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google receives knowledge of personal data, such as your IP address, in order to trace the origin of visitors and clicks. The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by you. Whenever you visit our website, this personal data, including the IP address you use, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. We have concluded a contract for order data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. You can prevent cookies from being set at any time by making the appropriate settings in the Internet browser you are using, thereby permanently objecting to the setting of cookies. You also have the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, you must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout. Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/. Google Analytics is explained in more detail at the link https://www.google.com/intl/de_de/analytics/. VI. Processing of bookings and payment information To process bookings via our website, the personal data required to implement the booking is collected. This usually includes first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data that is necessary to process the booking. To process the booking, personal data that is related to the respective booking is also necessary. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiration date and CVC code, prices and taxes, information on previous purchasing behavior or other information regarding your financial situation. The purpose of transmitting the data is in particular to verify identity, administer payments and prevent fraud. The purpose of data collection is therefore the fulfillment of (pre-)contractual obligations in accordance with Art. 6 (1) lit. b GDPR. V. Purposes and legal bases of data processing, contract processors, transfer to third parties in third countries We only use the personal data you provide to us for the purposes for which they are intended. Legal bases for the processing of your data can be, in particular, the initiation and processing of contracts, advertising, quality assurance, fraud prevention or the keeping of statistics. Another legal basis for the processing of your data is your consent to the use and transfer of your personal data. You can revoke your consent at any time without giving any formalities. Personal data is only transferred to state institutions and authorities on the basis of mandatory national legal provisions. The people commissioned by us to process the data are obliged to maintain confidentiality and process the data lawfully. If your personal data is further processed for a purpose other than the original purpose, we will notify you accordingly. We use the support of external service providers (contract processors) for certain technical processes relating to data analysis, processing and/or storage. Both we and the processor are obliged to comply with the technical and organizational measures in accordance with Art. 32 GDPR and the external service provider is also obliged to maintain confidentiality. Processing is carried out exclusively on our behalf and on our instructions. Any processing of your personal data beyond this order data processing will only take place with your explicit consent or in cases ordered by law and by the authorities or courts. Data will only be transferred to third countries (countries outside the European Economic Area - EEA) if this is necessary to fulfill the contract, is required by law or if you have given us your consent. We will inform you separately about the details if required by law. VI. Duration of data storage We store your personal data collected from the time of collection. The data collected in this way will be stored by us for the duration of our business relationship, which includes, among other things, the initiation and processing of a contract. In addition, we are subject to various retention and documentation obligations, which arise, among other things, from the German Commercial Code (HGB) or the German Tax Code (AO). The retention periods prescribed there are up to ten years. Finally, the storage period with regard to the possibility of defending against legal claims is also determined by the statutory limitation periods, which, for example, according to §§ 195 ff of the German Civil Code (BGB) are usually 3 years, but in certain cases can also be up to thirty years. VII. Rights of data subjects (information for data subjects according to Chapter 3 GDPR) You have the following rights of data subjects: ● the right to information according to Art. 15 GDPR ● the right to rectification according to Art. 16 GDPR ● the right to erasure according to Art. 17 GDPR ● the right to restriction of processing of personal data according to Art. 18 GDPR ● the right to data portability according to Art. 20 GDPR and ● the right to object to the processing of personal data according to Art. 21 GDPR. In addition, according to Art. 77 GDPR, you have the right to lodge a complaint with a data protection authority.