Data protection
1. Responsible for data processing in connection with our website:
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Markus Wiehler
Oranienburger Str. 69
10117 Berlin-Mitte
Germany
2. Contact person regarding data protection
Markus Wiehler
Tel.: + 49 30-281 92 83
Mobil: + 49 172-391 92 57
E-Mail: hauptstadtstrip@me.com
3. General information about data processing
3.1 Extent of processing of personal data
In principle, we process personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
3.2 Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c DSGVO as legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.
3.3 Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. Logfiles are stored for a duration of 7 days. Further information under point 4.
4. Description of the website and creation of log files
4.1 Type of data collected
For technical reasons, every time you visit our website, the following data, which your Internet browser transmits to us or to our web space provider, is collected (so-called server log files):
– browser type and version, – underlying operating system – Web site from which you visit us – Web page you visit – Date and time of your access – your IP address.
These anonymous data are stored separately from any personal information that you may provide and so do not allow any conclusions to be drawn about a particular person. They are evaluated for statistical purposes in order to optimize our website and our offers.
The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the assignment of the data to a user. A storage of this data together with other personal data of the user does not take place
5. Cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break. In addition, we use cookies on our website that allow an analysis of users’ browsing behavior.
The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.
When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies in the browser settings can be prevented.
6. Tools, Plugins and integration of services and content of third parties
6.1 Social Media
We maintain online presence within social networks and platforms. When calling the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective operators.
Unless otherwise stated in our privacy policy, we process users’ data as long as they communicate with us within social networks and platforms.
6. 2 Services and content of third parties
Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we make use of content or services offered by third-party providers to provide content and services , such as Include videos or fonts.
In the process, the third party uses the IP address of the users to send it to browsers. The IP address is therefore required for the presentation of this content.
Third parties may use so-called pixel tags for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.
6.3 Youtube
We embed the videos on the YouTube platform of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out:: https://adssettings.google.com/authenticated.
6.4 Google Web Fonts
This site uses so-called web fonts, provided by Google, for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you use must connect to Google’s servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your browser does not support web fonts, a default font will be used by your computer. For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://www.google.com/policies/privacy/.
6.5 Google Analytics
On the basis of legitimate interests (interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie is usually transmitted to a Google server in the US and stored there.
Google is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation. Further information can be found on
www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Die von Google in unserem Auftrag erhobenen Informationen zur Nutzung des Online-Angebotes, werden genutzt um Reports über die Aktivitäten innerhalb dieses Onlineangebotes und weiterer mit der Internetnutzung verbundenen Dienstleistungen zu erstellen. Die verarbeiteten Daten ermöglichen die Erstellung von pseudonymen Nutzerprofilen der Besucher unseres Onlineangebotes.
The information collected by Google on our behalf regarding the use of the online offer will be used to compile reports on the activities within this online offer and other services related to internet usage. The processed data enable the creation of pseudonymous user profiles of the visitors of our online offer.
Transferred IP addresses are not merged with other data by Google. By setting the browser software accordingly, cookies can be prevented from being stored. In addition, the collection of data generated by the cookie and the associated processing by Google can be prevented by downloading and installing the browser plug-in available via the following link.
https://tools.google.com/dlpage/gaoptout?hl=de
Als Alternative zum Browser-Plugin (insbesondere für mobile Endgeräte), kann die Datenerfassung durch Google Analytics über einen Klick auf diesen Link verhindert werden. Dabei wird ein Opt-Out-Cookie gesetzt, welches die Erfassung Ihrer Daten beim Besuch dieser Website zukünftig verhindert. Das Opt-Out-Cookie funktioniert nur im verwendeten Browser. Sollten Cookies im Browser gelöscht werden, muss der Opt-Out-Cookie erneut gesetzt werden.
As an alternative to the browser plug-in (especially for mobile devices), data collection by Google Analytics can be prevented by clicking on this link. An opt-out cookie is set, which prevents the collection of your data when visiting this website in the future. The opt-out cookie only works in the browser used. If cookies are deleted in the browser, the opt-out cookie must be set again.
We also use Google Analytics to analyze data from AdWords for statistical purposes. If you do not want this, you can disable it through the Ads Preferences Manager.
http://www.google.com/settings/ads/onweb/?hl=de
IYou can also find information about privacy in connection with Google Analytics in Google Help. https://support.google.com/analytics/answer/6004245?hl=de
6.6 Akismet
This site uses the Akismet plug-in from Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110-4929, USA. With the help of this plugin, comments from real people are distinguished from spam comments. All comment information is sent to a server in the US, where it is analyzed and stored for four days for comparison. If a comment has been classified as spam, the data will be stored beyond that time. This information includes the name entered, the email address, the IP address, the comment content, the referrer, details of the browser used, the computer system and the time of the entry.
7. Contact
When contacting us (for example, via contact form, e-mail, telephone or social media), the information provided by the user for processing the contact request and its processing in accordance with. Art. 6 para. 1 lit. b) DSGVO processed.
We delete the requests, if they are no longer required. We check the necessity annually, furthermore the legal archiving obligations apply.
8. Hosting and E-Mail
The hosting services we use are designed to provide the following services: infrastructure services, computing capacity, storage and database services, e-mailing, security, and technical maintenance services we use to operate this online service.
The hosting provider may use the inventory data, contact data, content data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer. Art. 6 para. 1 lit. f DSGVO i.V.m. Art. 28 GDPR.
9. Rights of the person concerned
9.1 Right
You may ask the person in charge to confirm if personal data concerning you is processed by us. If such processing is available, you can request information from the person responsible about the following information:
– the purposes for which the personal data are processed;
– the categories of personal data that are processed;
– the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
– the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
– the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
– the existence of a right of appeal to a supervisory authority;
– all available information on the origin of the data, if the personal data are not collected from the data subject;
– the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
9.2 Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
9.3 Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
– if you deny the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
– the processing is unlawful and you refuse the deletion of personal data and instead demand the restriction of the use of personal data;
– the person responsible no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims, or
– if you objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.9.4 Recht auf Löschung
a) deletion obligations
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true: – Your personal information is for the purposes for which it is used collected or otherwise processed, no longer necessary. – You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for processing. – You lay gem. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO Opposition to processing. – Your personal data has been processed unlawfully. – The deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law to which the controller is subject. – The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
b) Information to third parties
f the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
c) Exceptions
The right to erasure does not exist insofar as the processing is necessary – to exercise the right to freedom of expression and information; – to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of public authority delegated to the controller; – for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR; – for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the right referred to in subparagraph (a) is likely to render impossible or seriously prejudice the achievement of the objectives of that processing, or to assert, pursue or defend rights.
9.5 Right to information
If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort. You have a right to the person responsible to be informed about these recipients.
9.6 Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that the processing is subject to consent in accordance with Art. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
9.7 contradictory legal
Sie haben das Recht, aus Gründen, die sich aus ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten, die aufgrund von Art. 6 Abs. 1 lit. e oder f DSGVO erfolgt, Widerspruch einzulegen; dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling.
Der Verantwortliche verarbeitet die Sie betreffenden personenbezogenen Daten nicht mehr, es sei denn, er kann zwingende schutzwürdige Gründe für die Verarbeitung nachweisen, die Ihre Interessen, Rechte und Freiheiten überwiegen, oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.
Werden die Sie betreffenden personenbezogenen Daten verarbeitet, um Direktwerbung zu betreiben, haben Sie das Recht, jederzeit Widerspruch gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten zum Zwecke derartiger Werbung einzulegen; dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht.
Widersprechen Sie der Verarbeitung für Zwecke der Direktwerbung, so werden die Sie betreffenden personenbezogenen Daten nicht mehr für diese Zwecke verarbeitet.
Sie haben die Möglichkeit, im Zusammenhang mit der Nutzung von Diensten der Informationsgesellschaft – ungeachtet der Richtlinie 2002/58/EG – Ihr Widerspruchsrecht mittels automatisierter Verfahren auszuüben, bei denen technische Spezifikationen verwendet werden.
9.8Right to revoke the data protection consent declaration
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
9.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.