1. Data protection at a glance

General information

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our data protection declaration below.

Data collection on our website

Who is responsible for the data collection on this website?

Data is processed on this website by the website operator. The operator's contact details can be found in the website's legal notice.

How do we collect your data?

In the one hand, your data is collected when you communicate it to us. This could, for example, be data you enter on a contact form.

Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data such as the browser and operating system you are using or the time when you accessed the page. This data is collected automatically as soon as you visit our website.

What do we use your data for?

Part of the data is collected to ensure proper functioning of the website. Other data can be used to analyse how visitors use the site.

What rights do you have with regard to your data?

You have the right to request information about your stored data, its origin, recipients, and the purpose of its collection free of charge at any time. You also have the right to request that they be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You also have the right to file a complaint with the respective regulatory authorities.

You also have the right to request that the processing of your personal data be restricted under certain circumstances. Relevant details may be found in this data protection declaration under "Right to restriction of processing".

Third-party analytics and tools

When visiting our website, your browsing behaviour may be statistically analysed. This is done primarily through the use of cookies and analytics. The analysis of your browsing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by refraining from using specific tools. You can find detailed information on this in the following data protection declaration.

You can object to this analysis. We will inform you about the options for objection in this data protection declaration.

2. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this data protection declaration

If you use this website, various pieces of personal data will be collected. Personal information includes any data with which you could be personally identified. This data protection declaration explains what information we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that the transmission of data over the Internet (e.g., via email communication) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the data controller

The data controller for data processing on this website is:

Hasetal Touristik GmbH

Langenstraße 33

49624 Löningen, Germany

Managing Director: Jurriën Dikken

Phone: +49 54 32 / 599 599

Email: [email protected]

The data controller is the natural or legal person who, either on their own or jointly with others, determines the purposes and means of the processing of personal data (for example, names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing activities are only possible with your explicit consent. You may withdraw your consent at any time. An informal message sent to us by email is sufficient to do this. The legality of the data processing performed prior to the revocation will remain unaffected by the revocation.

Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)

If the data processing is being performed based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you lodge your objection, we will no longer process the personal data that concerns you, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection on the basis of Art. 21 para. 1 GDPR).

If personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data which concerns you for the purposes of such advertising; this also applies to profiling insofar as it is associated with this direct marketing. If you object, your personal data will no longer be used for the purposes of direct marketing (objection on the basis of Art. 21 para. 1 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to appeal to a supervisory authority, in particular in the Member State of their usual residence, their place of work or the place of the alleged breach. Your right to appeal exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in execution of a contract provided to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another data controller, this will only occur if it is technically feasible to do so.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://", and the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, deletion and correction

As part of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, the right to have this data corrected or deleted. You can contact us at any time using the address given in the legal notice should you have further questions regarding personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address provided in our legal notice. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data held by us, we will usually need time to verify this. You have the right to request that the processing of your personal data be restricted during this verification process.
• If the processing of your personal data has taken/is taking place unlawfully, you can demand the restriction of data processing instead of data deletion. If we no longer require your personal data, but you need it to assert, defend or enforce legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have filed an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. Insofar as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.
• If processing of your personal data has been restricted, this data, apart from being stored, may be processed only with your consent, or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or a Member State.

Objection to promotional emails

The use of contact data published as part of legal notice obligations for the purpose of sending promotional and informational material that has not been expressly requested is hereby prohibited. The website operators explicitly reserve the right to take legal action against third parties who send unsolicited promotional material, such as spam emails.

3. Data protection officer

Statutory data protection officer

We have appointed a data protection officer for our company.

Hasetal Touristik GmbH

Luisa Willen

Langenstraße 33

49624 Löningen

Phone: 05432 599 599

Email: [email protected]

4. Data collection on our website

Cookies

Some of our webpages use cookies. Cookies do not damage your computer and do not contain viruses. Cookies help to make our website more user friendly, efficient and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are "session cookies". They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies enable us to recognise your browser when you next visit the site.

You can modify your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing your browser. Disabling cookies may limit your ability to use some of the functions of this website.

Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are set on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure its services are provided in a technically correct and optmised manner. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this data protection declaration.

Server log files

The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data will not be combined with data from other sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in its website being presented and optimised in a technically correct manner – for this purpose, the server log files must be recorded.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. We do not pass on this data without your consent.

We will therefore only process any data you enter onto the contact form with your consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time. An informal message sent to us by email is sufficient to do this. The legality of the data processing performed prior to the revocation will remain unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (for example, after we have finished processing your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only insofar as it is necessary to justify, establish or modify our legal relationship (master data). This is carried out on the basis of Art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil a contractual obligation or to undertake measures leading to such a contract. We collect, process and use your personal data about the use of our website (usage data) only to the extent required to enable users to access our service or to bill them for it.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods will remain unaffected.

Data transmitted when entering into a contract for online shops, retailers, and dispatch of goods

We transmit personal data to third parties only to the extent required to fulfil the terms of your contract with us, for example, to companies entrusted to deliver goods or banks entrusted to process payments. Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil a contractual obligation or to undertake measures leading to such a contract.

Data transmission when concluding a contract for services and digital content

We transmit personal data to third parties only to the extent required to fulfil the terms of your contract with us, for example, to banks entrusted to process payments.

Your data will not be transmitted for any other purpose unless you have given your express permission for this.

Your data will not be disclosed to third parties for advertising purposes without your express consent. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfil a contractual obligation or to undertake measures leading to such a contract.

Google Analytics data protection declaration

On our website, we use the Google Analytics (GA) analysis tracking tool from the American company Google Inc. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe. Google Analytics collects data about your actions on our website. For example, if you click on a link, this action is saved in a cookie and sent to Google Analytics. The reports we receive from Google Analytics allow us to better adapt our website and our service to suit your needs. Below, we go into more detail about the tracking tool and, above all, give you information about which data is stored and how you can prevent this.

What is Google Analytics?

Google Analytics is a tracking tool that is used to analyse traffic on our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions that you carry out on our website. As soon as you leave our website, this data is sent to the Google Analytics server and stored there.

Google processes the data and we receive reports on your user behaviour. These reports can include the following:

• Target group reports: target group reports allow us to get to know our users better and receive more precise information on who is interested in our service.
• Ad reports: ad reports make it easier for us to analyse and improve our online advertising.
• Acquisition reports: acquisition reports provide us with helpful information on how we can get more people interested in our service.
• Behavioural reports: these tell us how you interact with our website. We can see how you move through our site and which links you click.
• Conversion reports: conversion is a process in which you carry out a desired action based on a marketing message. For example, when you go from being a pure website visitor to becoming a purchaser or newsletter subscriber. With the help of these reports, we can find out more about how our marketing measures come across to you. This is how we wish to increase our conversion rate.
• Real-time reports: here, we always find out immediately what is happening on our website. For example, we can see how many users are currently reading this text.

Why do we use Google Analytics on our website?

Our goal with this website is clear: we wish to offer you the best possible service. The statistics and data from Google Analytics help us achieve this goal. The statistically evaluated data gives us a clear picture of our website's strengths and weaknesses. On the one hand, we can optimise our site so that those who are interested can find it more easily on Google. On the other hand, the data helps us to better understand you as a visitor. Therefore, we know very well what we need to improve on our website in order to offer you the best possible service. The data also helps us carry out our advertising and marketing measures in a more individually tailored and cost-effective manner. After all, it only makes sense to show our products and services to people who are interested in them.

Which data is stored by Google Analytics?

Google Analytics uses a tracking code to create a random, unique ID that is linked to your browser cookie. This is how Google Analytics recognises you as a new user. The next time you visit our site, you are recognised as a "returning" user. All collected data is saved together with this user ID. This is the only way to evaluate pseudonymous user profiles. In order to analyse our website with Google Analytics, a property ID must be inserted into the tracking code. The data is then stored in the corresponding property. For each newly created property, the Google Analytics 4 property is the default. Alternatively, the Universal Analytics Property can also be created. Depending on the property used, data is stored for different lengths of time. Your interactions on our website are measured by identifiers such as cookies and app instance IDs. Interactions are all types of actions that you carry out on our website. If you also use other Google systems (such as a Google account), data generated by Google Analytics can be linked to third-party cookies. Google does not pass on any Google Analytics data unless we, as the website operator, approve this. Exceptions can be made if required by law.

How long and where will the data be stored?

Google has servers all over the world. Most of the servers are located in America and therefore your data is mostly stored on American servers. Here you can read exactly where the Google data centres are located:www.google.com/about/datacenters/inside/locations/ Your data will be distributed on different physical data carriers. This has the advantage that the data can be accessed more quickly and is better protected against manipulation. All Google data centres have appropriate emergency programmes for your data. If, for example, the hardware at Google fails or natural disasters immobilise servers, the risk of Google suffering service interruption remains low. The retention period of the data depends on the properties used. When using the newer Google Analytics 4 properties, the retention period of your user data is set to 14 months. For other so-called event data, we have the option of choosing a retention period of 2 months or 14 months. With Universal Analytics properties, Google Analytics has a standardised retention period of 26 months for your user data. Your user data is then deleted. However, we do have the option of choosing the retention period for user data ourselves. There are five options for this:

• Deletion after 14 months
• Deletion after 26 months
• Deletion after 38 months
• Deletion after 50 months
• No automatic deletion

In addition, there is also the option to have data only be deleted if you no longer visit our website within the period of time chosen by us. In this case, the retention period will be reset each time you visit our website again within the specified period. When the specified period has expired, the data is deleted once a month. This retention period applies to your data, which is linked to cookies, user identification and advertising IDs (e.g., cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated data constitutes a merging of individual data into a larger unit.

How can I delete my data or prevent data storage?

According to the data protection law of the European Union, you have the right to receive information about your data, to update it, delete it or restrict it. Using the browser add-on to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js), you will generally prevent Google Analytics from using your data. You can download and install the browser add-on attools.google.com/dlpage/gaoptout. Please note that this add-on only deactivates data collection by Google Analytics. Should you wish to deactivate, delete or manage cookies (independently of Google Analytics), there is a separate guide for each browser: Chrome: delete activate and manage cookies in Chrome Safari: managing cookies and website data with Safari Firefox: delete cookies to remove data that websites have stored on your computer Internet Explorer: deleting and managing cookies Microsoft Edge: deleting and managing cookies Google Analytics is an active participant in the EU-U.S. Privacy Shield Framework which regulates the correct and secure transfer of personal data. More information can be found atwww.privacyshield.gov/participant. We hope we have been able to give you an understanding of the most important information on data processing by Google Analytics. Should you wish to learn more about the tracking service, we recommend these two links: www.google.com/analytics/terms/de.html and support.google.com/analytics/answer/6004245.

Facebook Pixel data protection declaration

We use the Facebook pixel of Facebook on our website. To do this, we have implemented a piece of code into our website. The Facebook pixel is an excerpt from JavaScript code which loads a group of functions allowing Facebook to track your user actions if you have come to our website via Facebook ads. For example, when you purchase a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies enable Facebook to compare your user data (customer data such as IP address, user ID) with the data of your Facebook account. This data is then deleted again by Facebook. The data collected is anonymous for us, it cannot be viewed and it can only be used in the context of placing advertisements. If you are a Facebook user and logged in, your visit to our website will automatically be attributed to your Facebook user account.

We only wish to show our services or products to those people who are really interested in them. Facebook pixels allow our advertising activities to be better tailored to your wishes and interests. This allows Facebook users (insofar as they have allowed personalised advertising) to see advertising which is appropriate for them. Facebook also uses the collected data for analysis purposes and its own advertisements.

Data protection regulations for Google Analytics and Facebook pixels were created with www.adsimple.de

5. Social media

Facebook Plugins (Like & Share button)

Plugins are integrated on this website for the Facebook social network, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook plugins can be recognised by the Facebook logo or the "Like button" on our site. You can find an overview of the Facebook plugins here:https://developers.facebook.com/docs/plugins/.

When visiting our site, the plug-in will establish a direct connection between your browser and the Facebook server. This allows Facebook to receive the information that you have visited our website with your IP address. If you click on the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our webpages to your Facebook profile. This allows Facebook to attribute visits to our website to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's data protection declaration at:www.facebook.com/privacy/explanation.

If you do not want Facebook to attribute your visit to our web pages to your Facebook user account, please log out from your Facebook user account.

The use of the Facebook plug-ins is based on Art. 6 para. 1 lit. f GDPR. The website operator has a justified interest in ensuring the widest possible visibility on social media.

6. Analysis tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. These are text files which are stored on your computer and allow your use of the website to be analysed. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Google on servers in the USA.

The storage of Google Analytics cookies and the use of this analysis tool are carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation feature on this website. This means that your IP address will be truncated by Google within the European Union or and the European Economic Area prior to transmission to the United States. Only in exceptional cases are IP addresses transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity, and provide other services to the website operator related to website and internet usage. The IP address provided by your browser in the framework of Google Analytics will not be combined with other data from Google.

Browser Plugin

You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing the data (including your IP address) created by the cookie and relating to your use of the website by downloading and installing the browser plug-in available at the following link:tools.google.com/dlpage/gaoptout.

Objection to data collection

You may prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents your data from being collected on future visits to this site: disable Google Analytics.

For more information about how Google Analytics handles user data, please see Google's privacy policy:support.google.com/analytics/answer/6004245.

Order processing

We have concluded an order processing contract with Google