Not yet a member? Register for free and unlock instant discounts with our a&o Club membership
Become a member now - for free!
We are required by law to inform you about the processing of your personal data (hereinafter "data") when you use our website. We take the protection of your personal data very seriously. This data protection notice informs you about the details of the processing of your data and about your legal rights in this respect. For terms such as "personal data" or "processing", the legal definitions from Art. 4 GDPR are authoritative. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding case law. We recommend that you read the data protection declaration from time to time and keep a printout or copy for your records.
The data protection declaration is gold-plated for all pages of https://www.aohostels.com/de/. You do not have to belong to any linked websites or Internet presences of others. Information on data processing that is taking place in our hostels on site can be found here.
Responsible for the processing of personal data within the scope of this privacy policy is:
a&o hostels Marketing GmbH
Adalbertrstaße 50, 10179 Berlin, Germany
[email protected]
If you have any questions on the subject of data protection with regard to our company or our website, you can contact our data protection officer:
Data Protection Officer
c/o a&o hostels Marketing GmbH
Adalbertstraße 50, 10179 Berlin, Germany
[email protected]
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.
You have the following rights in relation to personal data relating to you, which you can enforce against us:
You can exercise your rights by notifying the contact details mentioned in the section "Responsible provider" or the data protection officer appointed by us.
If you believe that the processing of your personal data violates data protection law, you also have the right to complain to a data protection supervisory authority of your choice in accordance with Art. 77 GDPR.
You are able to visit our websites without disclosing any information about your person. Only access data that are automatically transferred by your browser will then be collected. The access data include, in particular:
The temporary processing of this data is necessary to technically enable the course of a website visit and a delivery of the website to your end device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files does not take place. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. The access data is deleted after 120 minutes. After that, they are only indirectly available via the reconstruction of backup tapes (backups) to ensure our obligations to data security.
You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
In addition to the aforementioned access data, so-called cookies or similar technologies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the operating system and cannot execute programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis of website usage).
Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:
You can object to the processing. Your right to object exists for reasons arising from your particular situation. By changing the settings in your internet browser, you can deactivate or restrict the processing by cookies. Cookies that have already been saved can be deleted at any time in the browser settings. You can also prevent the use of cookies by opening the browser you are using in "private mode".
We also use cookies on the website to display the content of our website more efficiently and quickly or to display messages to you in the browser for the purpose of using website functions. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in the more efficient and attractive design of the website. The technically unnecessary cookies are automatically deleted after a maximum duration of one month. Insofar as we integrate third-party cookies in our website, we will inform you of this separately below.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. By changing the settings in your internet browser, you can deactivate or restrict the processing by cookies. Cookies that have already been saved can be deleted at any time in the browser settings. You can also prevent the use of cookies by opening the browser you are using in "private mode".
When contacting our company, e.g. by e-mail or via the contact form on the website, the personal data you provide will be processed by us in order to answer your enquiry. It is mandatory for the processing of enquiries via the contact form on the website to provide a name, your postcode, your place of residence and a valid e-mail address. At the time of sending the message to us, your IP address and the date and time of registration are also processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR or Art. 6 para. 1 p. 1 lit. b) GDPR if the contact is aimed at concluding a contract. If the enquiry is aimed at the conclusion of a contract, the provision of your data is necessary and obligatory for the conclusion of a contract. If the data is not provided, it will not be possible to conclude or execute a contract in the form of contacting you or processing the enquiry. The processing of the personal data from the input mask is solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data is not passed on to third parties. We delete the data accrued in this context after the processing is no longer necessary - usually after the end of the communication - or restrict the processing, if necessary, to compliance with the existing legally mandatory retention obligations.
Data processing may also take place in the course of the use of the chatbot, which customers can use to clarify customer-specific questions. The above data processing also applies in this context.
You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
>We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute the contract. After the purpose has been achieved (e.g. contract execution), the personal data will be blocked for further processing or deleted, unless we are authorised to process it further on the basis of consent granted by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or on the basis of legitimate interests (e.g. retention for the enforcement of claims).
The transfer of your personal data to third parties takes place insofar as
Your personal data will not be passed on to other persons, companies or bodies unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 sentence 1 lit. a) GDPR. In the context of this data protection information, we point out the respective recipients in relation to the respective processing operation.
When you book a hotel room, we collect your name and e-mail address. We transmit this data to the responsible operating company. You can find an overview of the operating companies here. If you wish to make a booking on our website, it is necessary and obligatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address, the duration of your stay and your e-mail address as well as all other information relevant to the booking. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. Optional details for booking additional services are possible (e.g. breakfast, early arrival, late departure, express check-in, packed lunch, buggy, parking space, pet, ticket for public transport, EYCA Card, Hamburg CARD day pass). The data provided will be stored in our booking system. We process your data to process the booking/order and for this purpose we will in particular forward payment data to the payment service provider selected by you or to our house bank as well as to the service providers specified by you in each case for the provision of the optional services. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your data is necessary and obligatory for the conclusion or execution of the contract. If you do not provide your data, it will not be possible to conclude and/or execute the contract. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL technology. We delete the data accruing in this context after storage is no longer necessary or restrict processing if there are legal obligations to retain data. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.
As an alternative to entering your booking data with us, you can also register directly in our booking system using the data stored with one of the following payment service providers: PayPal - PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg and Amazon Payments - Amazon Payments Europe S.C.A. 5, Rue Plaetis - 2338 Luxembourg. When you use the corresponding login function, the payment service provider transmits personal data about you to us, in particular your surname, first name, address and e-mail address, as well as all other booking-relevant information, provided that you give the payment service providers further information. You will be forwarded directly to the payment process after logging in to the respective service provider. The processing of the data forwarded to us by the payment service provider is carried out for the purpose of processing the booking. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f) GDPR, based on the legitimate interest in providing our guests with a simple and user-friendly login.
You can object to the processing. Your right to object is on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
If you would like to place an order in our voucher shop at https://shop.aohostels.com/, it is necessary and obligatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address and your e-mail address. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. In the case of non-provision, the conclusion of a contract by means of the voucher shop is not possible. In addition, we process the data you may have provided in the context of your message on the voucher. We process your data for order processing. For this purpose, we will in particular forward payment data to the payment service provider selected by you or to our house bank. We use the shopify ordering system (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, [email protected]) for the voucher shop in order to provide you with an optimal booking process. The processing of your order data takes place on the servers of Shopify International Limited in Ireland. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. To prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL technology. We delete the data accruing in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Three years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.
If you have created a customer account and would like to use it on our website, you must register using the following information:
Furthermore, your IP address as well as the date and time of registration are processed at the time of registration. We use the double opt-in procedure for registration. After you have submitted the data required for registration, you will receive an e-mail with an activation link. Only after the link has been activated by clicking on it will access to your customer account be created and registration successfully completed. For subsequent registrations (logins), the access data (user ID and password) selected by you during the first registration must be entered. If a confirmation of the transmitted link does not take place within 24 hours, we will block the information transmitted to us and delete it. Otherwise, your data will be deleted as soon as they are no longer required to achieve the purpose of their processing. This is the case for the data collected during the registration process when the registration on the website is cancelled or modified.
The following functions are available in the login area:
If you use the login area of the website, e.g. to edit your profile data or to view orders and bookings made, we also process the personal data required to initiate or fulfil the contract, in particular address data and information on the method of payment. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your data is necessary and obligatory for the conclusion or performance of the contract. If you do not provide your data, you will not be able to register or use the login area, i.e. it will not be possible to conclude and/or execute a contract. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were processed, or processing will be restricted if there are legal obligations to retain data. Due to mandatory commercial and tax regulations, we are obliged to retain your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations.
In the event of non-payment, we reserve the right to forward the data provided with the order to a lawyer and/or external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) for the purpose of address determination and/or legal enforcement. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in fraud prevention and the avoidance of default risks. In addition, we may share your data to ensure the exercise of our rights, as well as the rights of our affiliated companies, our cooperation partners, our employees and/or the users of our website, and the processing is necessary to this extent. Under no circumstances will we sell or rent your data to third parties. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have a legitimate interest in processing for law enforcement. We delete the accruing data after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
You may object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsible provider".
We are pleased that you are interested in us and would like to apply or have applied for a position in our company. Therefore, we provide you below with information on the processing of your personal data in connection with the application on our website. We process the following data, which is necessary and mandatory for the online application process:
Furthermore, at the time of submitting the online application, your IP address and the date and time of submitting the application form will be processed. The purpose of the processing is to check whether you are suitable for the position (or, if applicable, other open positions in our companies) and to ensure that the application procedure is carried out. The legal basis for processing your personal data in this application procedure is Art. 6 para. 1 p. 1 lit. b) GDPR in conjunction with. § Section 26 (1) BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the application procedure has been completed, processing may take place on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest then consists of asserting or defending claims. Data of applicants will be deleted after 6 months in the event of rejection. If you have been awarded a position during the application process, the data from the applicant data system will be transferred to our personnel information system. After receiving your application, your applicant data will be viewed by the HR department. Suitable applications are then forwarded internally to the department heads for the respective open position. Then the further procedure is coordinated. In principle, only those persons in the company have access to your data who need it for the proper conduct of our application procedure.
You have the right to object to the processing of your data insofar as the processing is based on the legal basis pursuant to Art. 6 (1) sentence 1 lit. f) GDPR. Your right to object exists on grounds arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
You have the option of subscribing to our e-mail newsletter on the website, with which we will regularly inform you about the following content:
To receive the newsletter, you must provide your name or pseudonym and a valid e-mail address. Insofar as you can subscribe to other newsletters on our website (e.g. to receive job offers), you will receive further information on the newsletter content at the appropriate point. The registration for our e-mail newsletter takes place in a double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have provided, in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirmation link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation is not received within 24 hours, we block the information transmitted to us and delete it after one month at the latest. After your confirmation, we process the e-mail address and name/pseudonym of the recipient concerned for the purpose of sending you our e-mail newsletter. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. We delete this data when you terminate the newsletter subscription. We process the data until you exercise your revocation by unsubscribing from our newsletter.
You can revoke your consent to the processing of your e-mail address for the receipt of the newsletter at any time, either by sending a message to us (cf. the contact details in the section "Responsibility") or by clicking directly on the unsubscribe link contained in the newsletter. In this case, the lawfulness of the processing carried out based on the consent until the revocation is not affected by the revocation.
Furthermore, the following data are processed at the time of subscription:
We also process your IP address, the time of your newsletter registration and the time of your confirmation in order to document your newsletter registration and prevent misuse of your personal data. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest in this processing is fraud prevention. We delete this data at the latest when the newsletter subscription ends.
In addition, we evaluate the opening/click rates of our newsletters when we send them. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files and are also embedded on our website. The processing takes place for the purpose of analysing the reading behaviour of our newsletters. In doing so, we record when you read our newsletters, which links you click on in them and infer the interests of our customers from this. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in this processing consist of measuring the reach and creating statistical analyses of our newsletters as well as optimising our email advertising. The information is processed for as long as you are subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.
We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".
We use the email marketing service "SendGrid" of the company SendGrid Inc. (1801, California Street St, Denver, CO 80202, hereinafter: SendGrid). If you have registered for the newsletter, the data provided during registration will also be processed on the servers of "SendGrid" in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which "SendGrid" undertakes to particularly protect the personal data of its users and to use the personal data only on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. "SendGrid" processes the necessary data for sending and evaluating the newsletters on our behalf. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the "SendGrid" server when the newsletter is opened. Technical information, such as the browser used, the time of the page retrieval and the IP address, is processed during the retrieval. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. The evaluation serves to identify the reader habits and click and open rates of all recipients. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. You can find more information at https://sendgrid.com/policies/privacy/
processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".
We use the e-mail marketing service "Customer Alliance" of the provider CA Customer Alliance GmbH, Ullsteinstraße 130, Turm B, 12109 Berlin to conduct guest satisfaction surveys. Customer Alliance processes the necessary data for sending and evaluating the newsletters on our behalf. In the course of retrieving the newsletter, technical information such as the browser used, the time of retrieval and the IP address is processed. This information is processed for evaluation and for the technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on. This information is used to identify the reading habits as well as the opening and click rates of all recipients. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. You can find more information in the Customer Alliance privacy policy at: https://www.customer-alliance.com/de/datenschutzbestimmungen/.
We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".
We use the email marketing service "MailChimp" from the provider Rocket Science Group, LLC (675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 303308, USA, hereinafter "MailChimp"). If you have registered for the newsletter, the data provided during registration will be processed on MailChimp's servers in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we have entered into a contractual agreement (so-called EU standard contractual clauses) with the Rocket Science Group, LLC, through which MailChimp undertakes to particularly protect the personal data of our newsletter subscribers and to process the personal data only on our behalf and on our instructions to process.
MailChimp processes this information for the purpose of sending and evaluating the newsletters. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. Technical information, such as the browser used, time of page retrieval and IP address, is collected during the retrieval process. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. Neither we nor MailChimp intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits of recipients in order to better adapt, optimise and control our newsletter content accordingly. Art. 6 para. 1 p. 1 lit. f) GDPR and a Data Processing Agreement in accordance with Art. 28 para. 3 p. 1 GDPR are the legal basis for the processing. Our legitimate interests lie in the measurement of reach, the creation of statistical analyses and the adaptation, optimisation and more targeted control of our newsletter content. Your data will be processed as long as the newsletter subscription exists, i.e. you have not exercised your right to cancel. Further information on data protection at MailChimp can be found at https://mailchimp.com/legal/privacy/.
We would like to point out that you can object to the receipt of direct advertising as well as the processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsibility".
We also use a MailChimp add-on called Mandrill to send the newsletter. This is also an offer from Rocket Science Group, LLC (512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter "Mandrill"). This service allows us to internally manage a database of email contacts. The service manages data about when an e-mail that we sent was read or links contained in it were opened. As with MailChimp, Mandrill is based in the United States. Accordingly, the EU standard contractual clauses made with Rocket Science Group, LLC also apply to Mandrill.
Thank you for your interest in our WhatsApp newsletter! In order to regularly send you the latest information, offers and news, we need your consent to process your personal data. Please read the following information carefully and confirm your consent.
1. Controller
The controller responsible for data processing is:
a&o hostels Marketing GmbH
Adalbertstraße 50, 10179 Berlin, Germany
Email: [email protected]
The use of WhatsApp is solely subject to the agreements you have made with WhatsApp. We use the software solution of SuperX GmbH, Prenzlauer Allee 242-247, 10405 Berlin, Germany, to offer and use WhatsApp. This provider stores all personal data in the EU. As an official WhatsApp partner, it uses the WhatsApp Business API, which means that no other third parties or WhatsApp have access to your personal data in our area of responsibility. Other third parties or WhatsApp gain access to your communication content.
For more information, please refer to the following privacy policies:
SuperX GmbH: Datenschutzbestimmungen | Superchat
WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: Privacy Policy - EEA
2. Purpose of the data processing
Your personal data will be processed for the purpose of sending you our newsletter via WhatsApp.
3. Type of data processed
The following data is processed:
4. Legal basis
The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
5. Consent
By sending the first message to us via WhatsApp, you agree that we may process your personal data for the purpose of sending you our newsletter.
6. Forwarding to recipients
Data is passed on to third parties or other recipients, such as our processors, for the purpose of sending the WhatsApp newsletter. Please note that when using WhatsApp, a third country transfer may take place. We base the transfer to third countries that may occur when registering for and sending our newsletter via WhatsApp on Art. 49 para. 1 subpara. 1 lit. b GDPR.
We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. When transferring data to countries outside the EU/EEA, it should be noted that the high European level of data protection cannot necessarily be guaranteed there. For example, there is a risk that this data may be processed by third country authorities without similarly effective legal remedies being available or all data subject rights being enforceable. In these cases, however, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred.
7. Right of revocation
You have the right to withdraw your consent at any time with effect for the future. To do so, you can simply send us a message with the text "STOP" via WhatsApp [From a technical perspective, this should be designed in such a way that the user can unsubscribe from the newsletter directly in the WhatsApp chat with a message] or contact us by email at [email protected]. After receiving your revocation, we will immediately delete your data collected as part of the WhatsApp newsletter and will not send you any further newsletters.
8. Data protection
Further information on data protection and the handling of your personal data can be found in our privacy policy: https://www.aohostels.com/en/website-privacy-statement/
9. Confirmation of consent
By sending the first message to us via WhatsApp, you confirm that you have read and understood this declaration of consent and agree to the processing of your personal data in accordance with the above conditions. Thank you for your trust!
On our website we offer you payment via "PayPal". The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal"). If you select payment via "PayPal", the payment data you enter will be transmitted to "PayPal" for the purpose of payment processing. The processing of your data to "PayPal" is based on Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute a contract with the payment method "PayPal". The data required for payment processing is transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations. Further information on data protection and the storage period at "PayPal" can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
For the purpose of payment processing, we pass on the payment data required for the credit card payment to the credit institution commissioned with the payment or to the payment and invoice service provider commissioned by us, if applicable. The processing is based on Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude a contract and/or execute a credit card payment. The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.
If you select the "SOFORT" payment method as part of your booking, we will forward the data you provide to Sofort GmbH (Theresienhöhe 12, 80339 Munich, Germany; hereinafter "SOFORT") for the purpose of processing the payment. "SOFORT" is a direct transfer procedure in which a transfer can already be filled in during the order process and executed in real time. For this purpose, you will be redirected to the website of the payment service provider "SOFORT". The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute the contract using the "SOFORT" payment method. The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations. Further information on the processing of your data by "SOFORT" can be found at .
"Amazon Payments" creates a transaction confirmation based on the transmitted data and, if necessary, processes your data for the purpose of an identity and creditworthiness check. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The legitimate interests pursued here are to prevent fraud and misuse of data and to minimise the risk of insolvency. In the credit assessment, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a "scoring" value). "Amazon Payments bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a "scoring" value is carried out according to recognised scientific procedures. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations. Further information on the processing of your data by "Amazon Payments" can be found at https://pay.amazon.de/help/201751600.
You may object to the processing insofar as the processing is based on the legal basis of Art. 6 (1) p. 1 lit. f) GDPR. Your right to object exists for reasons arising from your particular situation. You can exercise your right to object by notifying our contact details above.
On our website we offer payment via "BitPay". The provider of this payment service is BitPay B.V., Stadsplateau 7 WTC office 7, 3521 AU, Utrecht, the Netherlands (hereinafter: "BitPay"). If you select payment via "BitPay", after entering your user name and password with BitPay, the corresponding payment data will be transmitted to "BitPay" for the purpose of payment processing. The processing of your data to "BitPay" is based on Art. 6 para. 1 p. 1 lit. b) GDPR. The provision of your payment data is necessary and obligatory for the conclusion or execution of the contract. If the payment data is not provided, it will not be possible to conclude and/or execute a contract with the payment method "BitPay". The data required for payment processing are transmitted securely via the "SSL" procedure and processed exclusively for payment processing. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are statutory retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations. Further information on data protection and the storage period at "BitPay" can be found at https://bitpay.com/about/privacy.
We use external hosting services provided by Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, United States), which serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. For these purposes, all data - including the access data mentioned under the point "Use of our website" - which are necessary for the operation and use of our website are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using external hosting services, we pursue an efficient and secure provision of our web offer. In the process, your data is transmitted to the provider in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which "Cloudflare" undertakes to particularly protect the personal data of its users and to use the personal data only on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. Further information on data protection and the storage period at "Cloudflare" can be found at: https://www.cloudflare.com/de-de/privacypolicy/.
You can object to the processing. You have the right to object on grounds relating to your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
In addition, we use the services of the Content Delivery Network ("CDN") of Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, United States; hereinafter "Cloudfare") on our website for the purpose of faster retrieval and shortening the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which “Cloudflare” undertakes to give special protection to the personal data of its users and to only process the personal data on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using "Cloudflare", we are pursuing the legitimate interest of faster retrievability and a more effective and improved presentation of our online offer. Further information on data protection and the storage period for "Cloudflare" can be found at: https://www.cloudflare.com/de-de/privacypolicy/.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
We also use the services of the CloudFront content delivery network ("CDN") from Amazon Web Services ("AWS", Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States) on our website. The purpose of the integration is the faster retrievability and the shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. . Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which Amazon undertakes to give special protection to the personal data of its users and to only process the personal data on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using the "CDN", we are pursuing the legitimate interest of faster retrievability and a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://aws.amazon.com/de/privacy/?nc1=f_pr.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
We also use the Content Delivery Network functions of Bootstrap, a service of StackPath, LLC (2021 McKinney Avenue, Suite 1100 Dallas, Texas 75201) on our website. The purpose of the integration is the faster retrievability and shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which StackPath undertakes to particularly protect the personal data of its users and to process the personal data only on our behalf and on our instructions : https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using the "CDN", we pursue the legitimate interest of faster retrievability as well as a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://www.bootstrapcdn.com/privacy-policy/.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
We also use the Content Delivery Network functions of the jquery Foundation on our website, a service provided by Stackpath, LLC (2021 McKinney Ave, 1100 Dallas, TX 75201, USA). The purpose of the integration is the faster retrievability and shortening of the loading times of our online offer. When you visit the website, a library from the "CDN" is temporarily stored on your end device in order to avoid reloading the content, or a library that has already been loaded is played via the "CDN". In the process, end device information such as your IP address is transmitted to the provider in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which StackPath undertakes to particularly protect the personal data of its users and to process the personal data only on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using the "CDN", we pursue the legitimate interest of faster retrievability as well as a more effective and improved presentation of our online offer. Further information on data protection and the storage period can be found at: https://www.stackpath.com/legal/privacy-statement/.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
We use the monitoring service Pingdom of SolarWinds Worldwird, LLC (7171 Southwest Parkway, Bldg 400, Austin, Texas, 78735, USA, +1-512-628-9300) on our website. The use of Pingdom enables us to obtain a representation of the availability of our websites and the loading behaviour of our users. For this purpose, your terminal device information, in particular your IP address, is processed. The legal basis for this is Art. 6 para. 1 p. 1 lit. a) GDPR. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which SolarWinds undertakes to particularly protect the personal data of its users and to only process the personal data on our behalf and on our instructions process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. Further information on data protection, in particular on the storage period, at SolarWinds can be found at: https://www.solarwinds.com/legal/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
When you visit our website, we ask you whether you would like to receive push notifications (notifications in the web browser). For this purpose, we use the technology of the respective web browser. We use push notifications to keep you informed about news through the notifications. If you agree to receive push notifications, we will only collect your browser ID, but no other personal data or device information. If you reject push notifications in your browser, we do not collect any data; in this case, your web browser also prevents the messages from being sent. Data processing in the course of push notifications is carried out for the purpose of communicating with our users and marketing offers. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests lie in ensuring further forms of communication and displaying advertising for our offers. The storage period of your browser ID is a maximum of twenty-four months.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can object to receiving push notifications by deactivating the corresponding setting in your browser software.
Third-party content such as videos, maps or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third-party providers") are aware of the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore necessary for the presentation of this content. In the following, we inform you about the services of external providers currently used on our website, as well as about the respective processing in individual cases and about your existing objection options.
We use so-called web fonts for the uniform display of fonts, which are provided by "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). When you call up a website, your browser loads the required web fonts from "Google" into your browser cache in order to display texts and fonts correctly and more quickly. For this purpose, the browser transmits your IP address to "Google" in order to establish the connection to the "Google" servers. In doing so, "Google" receives the information that our website has been accessed by you. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using "Google Web Fonts", we pursue the legitimate interest in a uniform and appealing presentation of our online offers. "Google" also processes your data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. Further information on the purpose and scope of processing by "Google" and the storage period for "Google Web Fonts" can be found at https://developers.google.com/fonts/faq and in the privacy policy of "Google": https://policies.google.com/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
This website uses the "Google Maps" service of "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) for the purpose of displaying maps or map sections and thus enables you to comfortably use the map function on the website. By visiting the website, "Google" receives the information that you have called up the corresponding sub-page of our website. In addition, some of the data mentioned in the section "Use of our website" and "Cookies" will be transmitted to "Google". This occurs regardless of whether "Google" provides a user account via which you are logged in or whether no user account exists. If you are logged into "Google", your data will be directly assigned to your account. If you do not want your data to be associated with your profile at "Google", you must log out before activating the button. "Google" stores your data as usage profiles and processes them independently of the existence of a user account with "Google" for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. By using "Google Maps", we pursue the legitimate interest of making our website more attractive and providing you with additional service. "Google" also processes your data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. Further information on the purpose and scope of processing by the plug-in provider and the storage period for "Google Maps" can be found at https://policies.google.com/privacy?hl=de.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating, restricting, or deleting cookies in the settings of your browser software or by opening the browser you are using in "private mode".
We use "Google reCAPTCHA" (hereinafter: "reCAPTCHA") on our website. The provider of the service is "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). The purpose of "reCAPTCHA" is to check whether the data input on the website (e.g. in a contact form) is made by a human being or by an automated programme. For this purpose, "reCAPTCHA" analyses the behaviour of the visitor to the website on the basis of various characteristics. This analysis begins automatically as soon as the user accesses the website. For the purpose of the analysis, "reCAPTCHA" evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to "Google". "Google" also processes your personal data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The processing is based on Art. 6 para. 1 p. 1 lit. f) GDPR. We have a legitimate interest in protecting our web offers from abusive automated spying and from unsolicited e-mail advertising (SPAM). You can find more information about "reCAPTCHA" and the storage period of the data in the privacy policy of "Google" https://policies.google.com/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
We use the "Google Tag Manager" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on our website. "Google Tag Manager" is a solution that allows website tags to be managed via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not itself collect any data from you. The tool triggers other tags, which in turn may collect data; we will inform you about this separately in this privacy policy. "Google Tag Manager" does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with "Google Tag Manager".
This website also uses the "Google Translate" service from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to translate words, sentences and between websites between German and other languages, thus enabling you to use the functions on our website conveniently. For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google also processes personal data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The processing is based on Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest lies in the attractive design of our website and the provision of services for our users. Further information on data protection at Google can be found at: https://policies.google.com/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can send us your objection via the contact details mentioned in the section "Responsibility".
End device information
In addition to the aforementioned access data, technologies are used when using the website that store information in your end device (e.g. desktop PC, laptop, tablet and smartphone) or access information that is already stored in your end device. These technologies may include cookies, pixels, LocalStorage, SessionStorage, IndexedDB or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites.
Pursuant to Section 25 (1) TTDSG, we generally require your consent to use these technologies. According to Section 25 (2) TTDSG, such consent is only not required if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary in order to provide a telemedia service expressly requested by you:
Technically necessary end device information
Some elements of our website serve the sole purpose of transmitting a message (Section 25 (2) No. 1 TTDSG) or are absolutely necessary in order to make our website or individual functionalities of our website available to you (Section 25 (2) No. 2 TTDSG):
• Language settings,
• Item in shopping cart,
• Log-in information.
The elements are deleted after storage is no longer required.
You can prevent processing by making the appropriate settings in your browser software. In the case of elements whose storage duration is not limited to the session, you can delete the elements in the settings of your browser software after your session has expired.
Google Consent Mode (Basic Mode)
Since we carry out so-called conversion measurements (website analytics, which measures the effectiveness with which an addressed group of people is persuaded to carry out desired actions) on our website by Google (Google Ads, Floodlight, Google Analytics 4 of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA), the integration of Google Consent Mode is necessary.
We have implemented Consent Mode in Basic Mode. This stores information in your end device or accesses information that is already stored in your end device.
This serves to record the consent status for the fulfillment of the data protection accountability and verification obligations pursuant to Art. 5 para. 2, 24 para. 1 and Art. 7 para. 1 GDPR in the processing chain with Google and, if applicable, other service providers and is therefore absolutely necessary according to § 25 para. 2 no. 2 TTDSG in order to make our website or individual functionalities of our website available to you. Tags and SDKs (Software Development Kit), which then enable the use of cookies and similar tracking technologies and trigger access to information from the server request of a user's browser, are only actively loaded after consent has been given.
With the consent mode in the basic mode, we receive additional information (so-called pings on the consent status) that or whether the user data can be used for marketing purposes ("ad_user_data") and possibly for retargeting purposes ("ad_personalization"), i.e. whether consent has been given or not.
If a user does not give consent for Google Analytics and/or Google Ads cookies, the functionality of the corresponding Google tags is adjusted so that no such cookies are read or written. If it is not possible to observe the path from ad interactions to conversions, gaps may occur in the media measurements. These gaps can be closed with conversion modeling, which is also integrated in the basic mode. In conversion modeling, observable data and previous trends are analyzed. This allows the ratio of users with and without consent to be determined.
The legal basis for the processing of conversion modeling is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interests in the integration lie in measuring the success of advertising expenditure without identifying an identifiable person.
Google also processes your personal data in the USA. The EU Commission has issued an adequacy decision for data transfer to the USA. Google, LLC is certified under this. In addition, so-called standard contractual clauses have been concluded with Google, LLC in order to commit Google, LLC to an appropriate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Further information on the purpose and scope of processing by the plug-in provider and the storage period at Google can be found at https://policies.google.com/privacy?hl=de.
You can object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. You have the right to object on grounds relating to your particular situation. You can send us your objection using the contact details provided in the "Controller" section.
We use plug-ins of the video platform "YouTube.de" or "YouTube.com" on the website, a service of YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter "YouTube"), for which "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is the responsible party within the meaning of data protection law. By processing data through the plug-ins, we pursue the purpose of integrating visual content ("videos") that we have published on "Youtube.de" or "Youtube.com" also on this website. The videos are all embedded in "extended data protection mode", i.e. no data about you as a user is transmitted to "YouTube" if you do not play the videos. While playing videos on our website, "YouTube" receives the information that you have accessed the corresponding sub-page of our website. In addition, some of the data mentioned in the section "Use of our website" is transmitted to "Google". This occurs regardless of whether "YouTube" provides a user account via which you are logged in or whether no user account exists. If you are logged in to "Google", your data will be directly assigned to your account. If you do not wish to have your data associated with your "YouTube" profile, you must log out before activating the button. "YouTube" stores your data as usage profiles and processes them independently of the existence of a user account with "Google" for the purposes of advertising, market research and/or needs-based design of its website. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. With the processing, we pursue the legitimate interests of making our website more attractive and providing you with an additional service. "Google" also processes your personal data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. For more information on the purpose and scope of processing by "YouTube" and the storage period at "YouTube", please refer to the privacy policy at https://policies.google.com/privacy.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can prevent the processing in different ways: by deactivating cookies in the settings of your browser software or by opening the browser you are using in "private mode".
We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised use of the website. The third-party providers use cookies to control their services (see the section "Cookies" above). In the following, we inform you about the services of external providers currently used on our website as well as about the respective processing in individual cases and about your existing options to object.
We have integrated the consent management tool "consentmanager" by Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden ([email protected]) on our website in order to request consent for the use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give or refuse your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, coverage measurement and personalised advertising. You can use "consentmanager" to give or refuse your consent for all functions or to give your consent for individual purposes or individual functions. The settings you have made can also be changed by you afterwards. The purpose of integrating "consentmanager" is to allow users of our website to decide whether to set cookies and similar functionalities and to offer them the option of changing settings already made in the course of further use of our website. In the course of using "consentmanager", personal data as well as information of the end devices used, such as the IP address, are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. c) or lit. f) GDPR. By processing your data, we comply with our legal obligations (e.g. obligation to provide proof of consent). Our legitimate interests in processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. After two years after the user settings have been made, you will be asked again for your consent. The user settings made will then be stored again for this period.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating, restricting, or deleting cookies in the settings of your browser software or by opening the browser you are using in "private mode".
In order to be able to optimally adapt our website to user interests, we use "Google Analytics", a web analysis service from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). "Google Analytics" uses so-called "cookies" (see section "Cookies" above), which are stored on your terminal device. With the help of the cookies, "Google" processes the information generated about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of statistical analysis of website use. This website uses "Google Analytics" with the extension "anonymizeIp()". This means that IP addresses are processed in a shortened form to make it much more difficult to relate them to individuals. According to "Google", your IP address will be shortened beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a "Google" server in the USA and shortened there. Google" will process this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for us and - where we specifically indicate otherwise - providing us with other services relating to website activity. The IP address transmitted by your browser for these purposes will not be merged with other data from "Google". The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. Your data in connection with "Google Analytics" will be deleted after twenty-four months at the latest. For the exceptional cases in which your data is transferred to the USA, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which "Google" undertakes to protect the personal data of its users in particular and to process the personal data only on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. Further information on data protection at "Google" can be found at: http://www.google.de/intl/de/policies/privacy.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out based on the consent until the revocation is not affected by the revocation.
We use the "Google Ads" offer from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) to draw attention to our attractive offers on external websites with the help of advertising media (formerly known as "Google AdWords"). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. These advertising media are delivered by "Google" via so-called "Ad Servers". For this purpose, we use "Ad Server" cookies, which can be used to measure certain parameters for measuring reach, such as the display of ads or clicks by users. If you access our website via a "Google" ad, a cookie is stored by "Google Ads" on your end device. With the help of the cookies, "Google" processes the information generated by your terminal device about interactions with our advertising media (call-up of a specific Internet page or click on an advertising medium), the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited as well as the date and time of the server request, for the purpose of analysing and visualising the reach measurement of our advertisements. For this purpose, we have also set up Enhanced Conversions. Enhanced Conversions is a feature that improves the accuracy of conversion tracking, where user privacy is protected by supplementing existing conversion tags with the hashed first-party conversion data from the website. Hashing the first-party data before sending it to Google Ads ensures privacy by converting personal information such as name and email address into a hashed string. Due to the marketing tools used, your browser automatically establishes a direct connection with the "Google" server. If you are registered with a "Google" service, "Google" can assign the visit to your account. Even if you are not registered with "Google" or have not logged in, it is possible that the provider may obtain and process your IP address. We only receive statistical evaluations from "Google" to measure the success of our advertising material. "Google" processes the data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) GDPR. The storage period at "Google" is twenty-four months. Further information on data protection and the storage period at "Google" can be found at: https://policies.google.com/privacy.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We use the "Google Ads" tool with the "Dynamic Remarketing" function from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). This is a procedure with which we would like to address you again. The "Dynamic Remarketing" function enables us to recognise users of our website on other websites within the "Google" advertising network (in the "Google" search or on "YouTube", so-called "Google Ads" or on other websites) and present advertisements tailored to their interests. The advertisements may also relate to products and services that you have already viewed on our website. For this purpose, the interaction of users on our website is analysed, e.g. which offers the user was interested in, in order to be able to display targeted advertisements to users on other sites even after they have visited our website. If you visit our website, "Google Ads" will store a cookie on your terminal device. With the help of the cookies, "Google" processes the information generated by your terminal device about the use of our website and interactions with our website as well as the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of playing out personalised advertisements. A combination of the data collected in the context of "Google Ads" with data from other "Google" products does not take place. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) GDPR "Google" processes the data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The storage period at "Google" is a maximum of twenty-four months. Further information on data protection and the storage period at "Google" can be found at https://policies.google.com/privacy.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We continue to use the online marketing tool "DoubleClick" from "Google" (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) on the website. "DoubleClick" uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. With the help of cookies (see the section "Cookies" above), "Google" records which ads are displayed in which browser and can thus prevent them from being displayed more than once. With the help of the cookies, "Google" processes the information generated by your terminal device about the use of our website and interactions with our website as well as the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of displaying personalised advertisements. This enables "Google" and its partner sites to display ads based on the previous visit to websites. In addition, "DoubleClick" can use the cookies to record so-called conversions that are related to ad requests. For example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase. Through the integration of "DoubleClick", "Google" receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a "Google" service, "Google" can assign the visit to your account. Even if you are not registered with "Google" or have not logged in, it is possible that the provider may obtain and store your IP address. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. "Google" processes the data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which “Google” undertakes to give special protection to the personal data of its users and to only use the personal data on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The storage period at "Google" is thirteen months. Further information on data protection and the storage period at "Google" can be found at: https://policies.google.com/privacy.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
This website uses Mouseflow: a website analytics tool that provides session replay, heatmaps, funnels, form analytics, feedback campaigns, and similar features/functionality. Mouseflow may record your clicks, mouse movements, scrolling, form fills (keystrokes) in non-excluded fields, pages visited and content, time on site, browser, operating system, device type (desktop/tablet/phone), screen resolution, visitor type (first time/returning), referrer, anonymized IP address, location (city/country), language, and similar meta data. Mouseflow does not collect any information on pages where it is not installed, nor does it track or collect information outside your web browser. If you'd like to opt-out, you can do so at https://mouseflow.com/opt-out. If you'd like to obtain a copy of your data, make a correction, or have it erased, please contact us first or, as a secondary option, contact Mouseflow at [email protected].
For more information, see Mouseflow’s Privacy Policy at http://mouseflow.com/privacy/.
For more information on Mouseflow and GDPR, visit https://mouseflow.com/gdpr/.
For more intormation on Mouseflow and CCPA visit https://mouseflow.com/ccpa.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We use the marketing functions of "Bing Ads" of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, hereinafter "Microsoft") on our website. The online advertising service "Microsoft Ads" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" to serve ads that are relevant to users and to improve reports on the effectiveness of campaigns. Information stored on users' devices is also processed. With the help of "Microsoft Ads", users can be served interest-based advertisements in relation to search results in search engines from "Bing" and "Yahoo". The advertisements may also relate to products and services that users have already viewed on our website. For this purpose, the interaction of users on our website is analysed beforehand, e.g. which offers users are interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. If users visit our website, a "cookie" is stored by "Microsoft Ads" on the end device of users. With the help of "cookies" and "tracking pixels", "Microsoft" processes the information generated by users' end devices about the use of our website and interactions with our website as well as access data, in particular the IP address, browser information, the website previously visited and the date and time of the server request, for the purpose of playing and analysing personalised advertisements. In addition, the online advertising service "Microsoft Ads" enables us to measure the reach of our advertisements and to allocate the success of an advertising medium. For this purpose, "Ad Server Cookies" are used, through which certain parameters for measuring reach, such as display of the ads, duration of viewing or clicks by users, can be measured. "Microsoft" processes the data in the USA. Your personal data will therefore be transferred to a country outside the European Economic Area, which does not have the same level of protection for personal data as within the European Economic Area. For this reason, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees, through which "Microsoft" undertakes to give special protection to the personal data of its users and to use the personal data only on our behalf and on our instructions to process: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) GDPR. The storage period for processing within the scope of "Bing Ads" is thirteen months. Further information on data protection at "Microsoft" can be found at: https://privacy.microsoft.com/de-de/privacystatement and https://about.ads.microsoft.com/de-de/ressourcen/richtlinien/privacy-policy.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We use the marketing functions of Airship on our website, a so-called customer engagement platform of the provider Urban Airship UK Ltd. (5 New Street Square, London, UK, EC4A 3TW, hereinafter: "Airship"), which enables us to centrally manage communication and interaction with our users, in particular via app, websites, SMS, emails and mobile wallets. With "Airship", we can carry out multi-channel campaigns on the basis of evaluated events as well as user attributes and thus ensure target group-specific and uniform marketing. "Airship" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" for the purpose of analysing user behaviour and registration events. With the help of "Airship", we can evaluate analysis-relevant data at user level, e.g. apps opened, user interactions made and products purchased, and use this data for target group-specific marketing. Information stored on users' end devices is also processed, e.g. when one of our websites was accessed and which elements users interact with. "Airship" processes information such as the time zone, browser information and other technical parameters for the purpose of statistical analysis and coverage measurement of our advertising campaigns. When using the "Airship" platform for e-mail or SMS communication, e-mail addresses and mobile phone numbers are also processed for the purpose of communication. The storage period is twenty-four months. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) GDPR. Further information on data protection at "Airship" can be found at: https://www.airship.com/legal/privacy/.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
Furthermore, the website uses the "Website Custom Audiences" function from "Facebook". The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, e-mail: [email protected]; hereinafter: "Facebook"). Via so-called web beacons such as the "Facebook pixel", information about your usage behaviour on our website is collected and processed by "Facebook". This enables users of the website and users of "Facebook" who belong to a comparable target group to be shown interest-related advertisements ("Facebook ads") when visiting the social network "Facebook". With the help of the "Facebook pixel" (small graphics that are also integrated on our website and that are automatically loaded when our website is called up and enable user behaviour to be tracked), your browser automatically establishes a direct connection with the "Facebook" server. By integrating the "Facebook Pixel", "Facebook" uses cookies to process information generated about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited, the "Facebook ID" and the date and time of the server request, for the purpose of playing out personalised advertisements. If you are registered with a "Facebook" service, "Facebook" can assign the collected information to your account. Even if you are not registered with "Facebook" or have not logged in, there is a possibility that the provider will learn and process your IP address and other identifying features. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a) GDPR. If "Facebook" processes the data in the USA, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which "Facebook" undertakes to particularly protect the personal data of its users and to process the personal data only on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The storage period of the information in the Facebook cookies is three months. Further information on data protection and the storage period at "Facebook" can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We use the online tool "Facebook Analytics" from "Facebook". The provider is Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland, email: [email protected]; hereinafter: "Facebook"). For the use of "Facebook Analytics", we use the so-called "Facebook Pixel" to analyse the use of our website and internet presences, e.g. in social networks "Facebook" and "Instagram", the interactions made by users on our website and internet presences as well as the reach measurement of our advertisements. With the help of the "Facebook pixel" - small graphics that are also integrated on our website, are automatically loaded when our website is called up and allow user behaviour to be tracked - your browser automatically establishes a direct connection with the "Facebook" server. By integrating the "Facebook pixel", "Facebook" processes information generated by cookies about the use of our website by your end device - e.g. that you have called up a particular web page - and processes, among other things, the data mentioned in the section "Use of our website", in particular your IP address, browser information, the website previously visited, the "Facebook ID" and the date and time of the server request, for the purpose of analysing our website and internet presence, analysing user interactions and measuring the reach of our advertisements. The information obtained with the help of the "Facebook pixel" is used solely for statistical purposes, is transmitted to us anonymously by "Facebook" as statistics and does not provide any information about the person of the user. If you are registered with a "Facebook" service, "Facebook" can assign the information collected to your account. Even if a user is not registered with "Facebook" or is not logged in, it is possible that "Facebook" will learn and process the IP address and other identifying features. The processing of your data is based on Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in the processing lie in the statistical analysis of website use, the measurement of the reach of advertisements and the optimisation and improvement of our website. If "Facebook" processes the data in the USA, we use the EU standard contractual clauses for the transmission of personal data to processors in third countries as suitable guarantees, through which "Facebook" undertakes to particularly protect the personal data of its users and to process the personal data only on our behalf and on our instructions: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en. The storage period of the information in the Facebook cookies is three months. Further information on data protection and the storage period at "Facebook" can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We also use the analysis tool Yandex Metrica from the provider Yandex LLC (Schipol Boulevard 165, 1118 BG Schipol). The web analytics service "Yandex" uses technologies such as "cookies", "tracking pixels" and "device fingerprinting" to track specific user behaviour on websites. Information stored on users' end devices is also processed. With the help of the tracking pixels embedded in websites and the cookies stored on users' end devices, Yandex processes the information generated about the use of our website by users' end devices - e.g. that a certain web page was called up - and access data for the purpose of statistical analysis of website use. The access data includes, in particular, the IP address, browser information, the website previously visited and the date and time of the server request. It is also possible to track how the mouse was moved, where it was clicked and how far it was scrolled. Randomly selected individual visits to our website are recorded. Logs are also created of user activity, page content, mouse movements, clicks, scrolling and keystroke activity of visitors. Through these logs, individual visits to our website can be randomly replayed to identify sources of technical error and to derive possible improvements to the user experience of our website. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit a) GDPR. "Yandex" also processes your data in Russia. We have concluded so-called "standard contractual clauses" with "Yandex" in order to oblige "Yandex" to comply with an appropriate level of data protection. We will provide you with a copy of the agreement upon request. Further information on data protection, in particular on the storage period, can be found at https://metrica.yandex.com/about/info/gdpr.
Revocation of your consent to processing is possible at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out because of the consent until the revocation is not affected by the revocation.
We use the "TikTok Pixel" on our website. The TikTok Pixel is a TikTok advertiser tool from the two providers "TikTok Technology Limited" (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and "TikTok Information Technologies UK Limited" (WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom) (both hereinafter collectively referred to as “TikTok”). The TikTok Pixel is a snippet of JavaScript code that allows us to understand and track visitor activity on our website. The Tiktok Pixel collects and processes information about the creators of our website or the devices they use (so-called event data). The event data collected via the TikTok Pixel is used to target our ads and to improve ad delivery and personalized advertising. For this purpose, the event data collected on our website using the TikTok pixel is transmitted to Facebook TikTok. Some of this event data is information that is stored in the device you are using. In addition, cookies are also used via the TikTok Pixel, via which information is stored on the device you are using. Such storage of information by the TikTok pixel or access to information that is already stored in your end device only takes place with your consent. The legal basis for the collection and transmission of personal data by us to TikTok is therefore Article 6 para. 1 lit. a) GDPR. This collection and transmission of the event data is carried out by us and TikTok as jointly responsible. We have entered into a processing agreement with TikTok as joint controllers, which defines the distribution of data protection obligations between us and TikTok.
In this Agreement, we and TikTok have agreed, among other things,
You can review the agreement between us and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms.
TikTok is solely responsible for the processing of the transmitted event data that follows the transmission. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how you can exercise your rights against TikTok, see TikTok's data policy at unter https://www.tiktok.com/legal/privacy-policy?lang=de-DE.
You can revoke your consent to the processing at any time by pushing back the slider in the "Advanced Settings" of the consent tool. The legality of the processing carried out on the basis of the consent up to the point of revocation is not affected by the revocation.
We use the service "Taboola" of the provider Taboola Inc (1115 Broadway, 7th Floor, New York, New York 10010, USA), which uses a visitor pixel on this website as well as cookies for conversion measurement. Taboola processes the following data: Destination page, follow-up page, pages visited, clicks and user status conversion data. This makes it possible to track the behavior of users after they have been redirected to the provider's website by clicking on a Taboola ad. This procedure is used to evaluate the effectiveness of the Taboola advertisements for statistical and market research purposes and can help to optimize future advertising measures. The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the users.
The data is processed on Taboola servers in the USA. Your personal data is therefore transferred to a country outside the European Economic Area, where the same level of protection for personal data does not exist as within the European Economic Area. For this reason, we have entered into a contractual agreement with Taboola Inc (so-called EU standard contractual clauses), by which Taboola undertakes to provide special protection for users' personal data and to process the personal data only on our behalf and in accordance with our instructions.
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR and an order processing agreement pursuant to Art. 28 para. 3 p. 1 GDPR. Further information on data protection at Taboola can be found at www.taboola.com/policies/privacy-policy.
You can revoke your consent to processing at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
.This website uses the personalisation and web analytics service Kameleoon. The programme enables an analysis of user behaviour on the basis of (automated) user segmentation. user segmentations. By analysing the log file data, we can determine how how the individual user segments visit the website, which landing pages are visited pages are visited and how an increase in click-through rates can be achieved. The system analyses your behaviour and its context when using this website and assigns this anonymously to target groups.
As described above, cookies/local storage of the browser are used for the analyses. which are linked to a pseudonymised ID. Your IP address is completely completely anonymised and not stored. The information generated by the cookie/local storage generated by the cookie/local storage will be transmitted to a Kameleoon server in server in Germany and stored there in aggregated and pseudonymised form. pseudonymous form. The IP address transmitted by your browser within the scope of Kameleoon will not be merged with other data from Kameleoon.
The use of Kameleoon is used to evaluate your use of the website and to compile reports on website activity. and to compile reports on website activities so that we can regularly improve our services on a regular basis. The legal basis for the storage of the cookie is your given consent (Art. 6 para. 1 p. 1 lit. a DS-GVO). The further evaluation of the collected data is carried out over a period of max. 365 days on the basis of Art. 6 para. 1 p. 1 lit. f DS-GVO.
You can revoke your consent to processing at any time by pushing back the slider in the "Advanced settings" of the Consent Tool. In doing so, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
.Version: 1.3 / Updated: August 2023
Join our WhatsApp Newsletter today!
Mastercard
Visa
Paypal
Amazon Pay
Cash
Gift Voucher
Sustainability at a&o - Net Zero in 2025
World’s largest Hostel Chain - With 28,500 Beds
