Welcome to our website! We place greatest value on protecting your data and safeguarding your privacy. In the following, we would like to outline which data we process when and to what purpose and on what legal basis. In this presentation we will explain how our offered services operate and how we guarantee the protection of your personal data.
According to Article 4, No. 1 of the General Data Protection Regulation (GDPR), personal data entails all information referring to an identified or identifiable natural person. A natural person is considered as identifiable if he/she can be directly or indirectly identified. Additional information on this subject is available, for example, in Article 4, No. 1 of the GDPR.
This Data Protection Declaration can be accessed at any time at https://www.einkaufserlebnis-trier.de/en/data-protection-declaration, saved, and printed.
We will again separately point to the right to object in the individual paragraphs (for example, with the notice: „You have the right to object“”) insofar as this right exists. You will also find additional information there for exercising your right to object.
To retain clarity in the following Data Protection Declaration, in different places we will indicate through links to information and data protection pointers which can be found on external websites (see also paragraph „Social Networks & External Links“ in this Data Protection Declaration). We endeavor to keep the links we list in this Data Protection Declaration up to date. Nevertheless, because of the constant updating of websites, it cannot be ruled out that links do not function correctly. If you become aware of such a broken link, we would be pleased if you would inform us, so that we can update the link.
Controller according to Article 4, No. 7 of the GDPR for processing personal data is
click around GmbH
Telephone: +49 651 97 90 70
Telefax: +49 651 97 90 720
Authorized chief executives: Ruth Holzemer, Andreas Holzemer
3) Contact Partner for Data Protection
For questions on the processing of your personal data as well as your rights concerning data protection, please contact
click around GmbH
Telephone: +49 651 97 90 70
Telefax: + 49 651 97 90 720
Data protection officer: Ralf Winkens
4) Log Files
Every time you open our website, we gather automatized data and information from your device system and store it in so-called server log files. These data represent information which refers to an identified or identifiable natural person (here the website user). The data are automatically transmitted by your respective browser when you visit our website. The following is a list of information items retrieved:
- The time you select our website (request to the server of the host provider),
- The address of the web page from which you visited our web page
- Your operating system
- Type and version of your browser,
- IP address of your computer.
This processing is done to make our website available to your device and enables us to correctly display our website on your device or in your browser. Furthermore, the data serve to optimize our website and to guarantee the security of our systems. An evaluation of these data for marketing purposes does not occur.
The legal basis for this processing is point (f) of Article 6(1) of the GDPR. We have a legitimate interest in presenting you with an optimally rendered website in your browser and enabling communication between our server and your end device. Processing your IP address is especially necessary for this communication.
We store the data for 7 days.
The recipient of the data is our server host, which operates within the framework of the Commissioned Data Processing Contract.
Providing personal data is not prescribed by law or by contract, nor are they required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, you will not under some circumstances be able to use our website or use it to its full extent.
- Cookies which contain a temporarily generated, concrete identification number which makes you or more specifically your device identifiable when you open our website. These cookies are automatically deleted when you leave our website.
This processing is carried out to make our website easier for you to use and to create the possibility of storing settings.
The legal basis for this processing is point (f) of Article 6(1) of the GDPR. We have a legitimate interest in presenting a website to you which stores your personal settings and facilitates your use of our website.
Providing personal data is not prescribed by law or by contract, nor are they required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, under certain circumstances you will not be able to use our website or use it to its full extent.
6) Contact Form
There is a contact form on our website which you can use to contact us electronically. When you contact us via this contact form, we process the data entered into the input fields.
The following data are requested in the mandatory input fields:
- First name
- Last name
- email address
- The information contained in your message
You can also add data voluntarily. This may simplify and speed up processing your request. The following data could potentially be included:
- Telephone number
We treat mandatory entries and voluntary entries equally. The mandatory entries are necessary to be able to contact us, so that we can process your request.
Additionally, the following data are stored when you submit your message:
- Date and time of the submission
Processing personal data as a part of the mandatory as well as voluntary entries is to process the contact request and to be able to answer the inquirer’s concern.
The other personal data processed during the submission (date and time of submission) serve to prevent misuse of our contact form.
The legal basis for the processing described here is point (f) of Article 6(1) of the GDPR. Our legitimate interest is to offer you the possibility to contact us at any time, so that we can answer your inquiry.
We store the data only so long as is required to provide the function.
Further data is deleted as soon as they are no longer required to fulfill their purpose.
The data recipient is our server host which operates for us within the framework of the Commissioned Data Processing Contract.
Providing personal data is not prescribed by law or by contract, nor is it required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, under certain circumstances you may not be able to use our contact form.
You have the opportunity on our website to subscribe to our newsletter.
When you contact us via this form, we process the data entered into the input fields. The following data are requested in the mandatory input fields:
- Form of address
- Last name
- email address
You can also add data voluntarily. The following data could potentially be included:
We treat mandatory entries and voluntary entries equally. The mandatory entries are necessary to be able to contact you, so that we can process your request.
To be able to reproduce the permission and name removal proof in conformity with the law, we also provide protocol data (time) for every user profile created by an email address confirmed through a closed-loop authentication.
The closed-loop authentication (double opt-in) provides for the following:
When you have registered to receive the newsletter, you then automatically receive an email with a confirmation or an activation link which you also confirm or activate. In that way, we ensure that the email address entered on our website really belongs to you. If you do not use the confirmation or activation link, the corresponding email address will receive no further emails from us.
We process the data exclusively; any other forwarding does not occur.
We collect and process the email address to allow us to be able to deliver the newsletter. The legal basis for this data processing is our legitimate interest according to point (f) of Article 6(1) of the GDPR. We have a legitimate interest in processing your entered data to send you information about our products.
Collecting and processing additional personal data as a part of the registration procedure is to prevent misuse of our newsletter or the email address used. Moreover, the processing described above serves us to prove your permission granted to us.
The legal basis for this processing is our legitimate interest according to point (f) of Article 6(1) of the GDPR. We have a legitimate interest in preventing misuse of our form or to prove misuse. Furthermore, we have a legitimate interest in protocolling the permission and/or acknowledgement of the data protection notice.
The data are deleted as soon as they are no longer required to fulfill the purpose of their collection.
Providing personal data is not prescribed by law or by contract, nor is it required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, we will not be able to make the newsletter available to you.
8) Information on Google Services
We use different services from Google, Inc. (“Google”) on our website, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
More detailed information on Google’s individual services is available in the further Data Protection Declaration.
Because Google services are included, Google may collect information (also personal data) and processes them. Therefore, it cannot be excluded that Google also transmits the information to a server in a third country.
As stated in the Privacy Shield Certification from Google (available at https://www.privacyshield.gov/list under the search keyword “Google”), Google has pledged to observe the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework concerning the collection, use, and storage of personal data from the member states of the EU and Switzerland. Google, including Google LLC and its 100 % subsidiaries in the US, has declared through certification that it will observe the Privacy Shield principles. Further information on this subject is available at https://policies.google.com/privacy/frameworks?gl=de.
We ourselves cannot influence which data Google actually collects and processes. Google states, however, that basically it is possible the following information (also personal data) will be processed:
- Protocol data (especially the IP address)
- Location-specific information
- Definitive application numbers
- Cookies and similar technologies
If you are logged into your Google account, Google can add the processed information to your account depending on your account settings and treat it as personal data; see especially https://policies.google.com/technologies/partner-sites?hl=de.
Google states, for example, the following:
„We may combine the information we collect among our services and across your devices for the purposes described above. For example, if you watch videos of guitar players on YouTube, you might see an ad for guitar lessons on a site that uses our ad products. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads delivered by Google.“ (https://policies.google.com/privacy)
You can prevent this data from being directly added by logging out of your Google account or by activating the appropriate account settings in your Google account. Moreover, you can prevent the installation of cookies – providing Google would set any – with appropriate settings in your browser. We would like to point out to you, however, that, in this case, you may not be able to use all functions of this website to their full extent.
Here is how to delete cookies on the most common browsers:
- Google Chrome:
- Mozilla Firefox:
- Apple Safari:
- Microsoft Internet Explorer:
More detailed information is available in the Data Protection pointers from Google, which you can retrieve here:
Pointers to privacy settings in Google are available at https://privacy.google.com/take-control.html
9) Google Analytics
We use Google Analytics on our website, a web analysis service from Google, Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies,” text files which are stored on your device and which permit an analysis of your use of the websites you visit. Google Analytics may also use so-called web beacons (invisible graphics), through which information such as user traffic on websites can be evaluated. The information created by cookies and web beacons about the use of our website (including the user’s IP address) are transmitted to a Google server, possibly in the US or another third country, and stored there. Google can transmit this information to Google contract partners.
Information on Google’s existing Privacy-Shield Certification and further relevant data on data processing by Google in the course of using Google services is available in this Data Protection Declaration under the heading „8) Information on Google Services“.
Google processes the following types of data:
- Online labeling (including cookie identifiers)
- Device identifiers
More detailed information on the processed data is available at https://policies.google.com/privacy?hl=en#infocollect under “Information we collect as you use our services” as well as at https://privacy.google.com/businesses/adsservices/.
We use Google Analytics only with activated IP anonymization (“anonymize IP”). Through this principle, Google shortens your IP address within member states of the European Union or in other contract states of the agreement across the European Economic Area. The complete IP address is transmitted to a Google server in the US only in exceptional cases and shortened there.
Moreover, we have closed a contract with Google for using Google Analytics for processing (Article 28 GDPR). We commission Google to process the data to evaluate your use of our website, to collect reports for us on the website activities, and to perform services for us concerned with website use and Internet use. Google may transmit this information to third parties, provided this is legally prescribed or provided third parties process these data as commissioned by Google.
We include Google Analytics because we wish to analyze user behavior on our website and to be able to react appropriately on this use. In that manner we can continually improve our offer.
The legal basis for the processing of personal data described here is Article 6, § 1 lit. f) of the GDPR. Our necessary legitimate interest lies in the great advantage of having the functions for our offer as described above. The statistical evaluation of user behavior enables us to react in particular in our own interests and to optimize our offer.
Google is entitled to commission subprocessors within the framework of the processing. A list of these subprocessors is available at https://privacy.google.com/businesses/subprocessors/.
The processed information will be stored for 14 months and deleted automatically after the expiry of the storage term.
Further information on data collecting practices in connection with Google Analytics is available in the Data Protection Declaration at Google: https://support.google.com/analytics/answer/6004245?hl=en
Pointers to privacy settings at Google are available at https://privacy.google.com/intl/en/take-control.html?categories_activeEl=sign-in
Providing personal data is not prescribed by law or by contract, nor is it required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, you will not be able to use our website or use it to its full extent.
10) Use of Google Maps
We use Google maps on our website. Google Maps is a service of Google, Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The inclusion of the Google Maps plug-in is achieved by embedding the service on our website using a so-called “iFrame.” When this iFrame is loaded, Google may collect information (also personal data) and processes them. Therefore, it cannot be excluded that Google also transmits the information to a server in a third country.
Information on Google’s existing Privacy Shield Certification and additional relevant data on data processing by Google when using Google services is available in this Data Protection Declaration under paragraph „8) Information on Google Services“.
We do not collect data when you use Google Maps on our website.
We include Google Maps because we wish to be able to display our address to you as well as to make additional information available for your route to the venue. Including Google Maps also permits us to present venues to you without limiting you to single map segments and allowing you to research distances independently, for example.
The legal basis for the processing of personal data described here is point (f) of Article 6(1) of the GDPR. Our necessary legitimate interest for this processing lies in the great advantage offered by Google Maps. Including the maps means that we do not need to display the route to the respective venues using route sketches or the like but that every user can plan their route independently. Furthermore, Google has a legitimate interest in collected (personal) data to improve its own services.
Providing personal data is not prescribed by law or by contract, nor is it required for a contract closing. You are also not obliged to provide personal data. If you do not provide personal data, however, under certain circumstances you may not be able to use our website or use it to its full extent.
More detailed information is available in the Data Protection pointers from Google, which you can retrieve here: https://policies.google.com/privacy
Pointers to Google’s privacy settings are available at https://privacy.google.com/take-control.html?categories_activeEl=sign-in
11) Contact Support
We offer you the possibility of contacting us by post, by telephone, by fax, or by email.
If you contact us by post, we can expressly process your address data (for example, last name, first name, street, city, postal code), date and time of the incoming mail as well as those data contained in your letter.
If you contact us by telephone, we can expressly process your telephone number as well as, if necessary during the conversation, ask for your name, your email address, time of the call, and details concerning the reason for your call.
If you contact us by fax, we can expressly process the fax number and the source identifier as well as the data contained in the fax.
If you contact us by email, we can expressly process the email address, time of the email as well as the data contained in the message (possibly also in attachments).
We process the above-mentioned data to process the contact inquiry and to be able to contact the inquirer to answer the inquiry.
The legal basis for the processing of personal data described here is point (f) of Article 6(1) of the GDPR. Our necessary legitimate interest for this processing lies in offering you the possibility to contact us at any time, so that we can answer your inquiry.
The personal data are deleted as soon as they are no longer required to fulfill the purpose they were collected for.
Providing personal data is not prescribed by law or by contract, nor is it required for a contract closing. You are also not obliged to provide personal data. If you do not provide this data, however, under some circumstances you cannot contact us or we may not be able to contact you.
12) Social Networks & External Links
Along with this website, we also maintain an online presence in different social media which you can reach on our website by clicking on the appropriate button. If you visit such a presence, personal data may be transmitted to the host of the social network. It is possible that, in addition to storing specific data you have entered into this social medium, other data are also processed by the host of the social network.
Moreover, the host of the social network may process the most important data of the computer system from which you visited the network – for example, your IP address, the processor used, and the browser version, including plug-ins.
Provided you are logged into your personal user account of the respective network during your visit to such a website, this network can assign the visit to this account.
The purpose and extent of data collection by the respective medium as well as the further processing there of your data and your rights on this subject are available in the regulations of the respective host responsible, for example:
We also wish to point out that our website contains further links to external websites, where we have no influence on the data processing on these external websites.
13) Data Security
We secure our website and our other systems through technical and organizational measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons. Despite routine checks, complete protection against all risks is, however, not possible.
14) Alteration of the Data Protection Declaration
Alterations in the law or alterations in our company-internal processes can make an adaptation of this Data Protection Declaration necessary.
In case of such an alteration, we will inform you 4 weeks before the planned alteration above the title “Data Protection Declaration.”
You have the right to cancel a formerly granted permission at any time, with effect for the future; the legality of the processing that has resulted from permission being granted until further cancellation is not compromised.
16) Rights of the Data Subject
You have fundamentally the following rights:
- Right of access (Article 15 of the GDPR)
- Right to rectification (Article 16 of the GDPR)
- Right to object (Article 21 of the GDPR)
- Right to erasure / right to be forgotten (Article 17 of the GDPR)
- Right to restriction of processing (Article 18f. of the GDPR)
- Right to data portability (Article 20 of the GDPR)
For questions of this kind, please contact firstname.lastname@example.org. Please note that, in the case of such questions, we must ensure that the inquirer is actually the person in question.
Regardless of other administrative or judicial redress, you have the right to enter a complaint with a data protection supervisory authority.
Our website does not conduct automated decision findings.
As of: May 25, 2018