Data protection

§ 1 Information on the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g., name, address, email addresses, user behavior. (2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is: Diana Stock, Eugenstr. 22, 88045 Friedrichshafen, Germany. (3) When you contact us by email or via a contact form, the data you provide (your email address, and, if applicable, your name and telephone number) will be stored by us in order to answer your questions. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if there are statutory retention obligations. The legal basis for processing the data transmitted in the course of sending an email or contacting us via a contact form is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. (4) If we use commissioned service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage period. Section 2 Your Rights (1) You have the following rights against us with regard to your personal data: – Right of access, – Right to rectification or erasure, – Right to restriction of processing, – Right to object to processing, – Right to data portability. (2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. Section 3 Collection of Personal Data When Visiting Our Website (1) When you use the website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR): – IP address – Date and time of the request – Time zone difference to Greenwich Mean Time (GMT) – Content of the request (specific page) – Access status/HTTP status code – Amount of data transferred in each case – Website from which the request originated – Browser – Operating system and its interface – Language and version of the browser software. (2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using. Through these cookies, certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the overall internet experience more user-friendly and effective. (3) Use of Cookies: a) This website uses the following types of cookies, the scope and function of which are explained below: – Transient cookies (see b) – Persistent cookies (see c). b) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. c) Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings. d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website if you do so. e) We use cookies to identify you on subsequent visits if you have an account with us. Otherwise, you would have to log in again each time you visit. f) The Flash cookies used are not recorded by your browser but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data independently of your browser and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install a corresponding add-on, such as "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using your browser's private browsing mode. We also recommend that you regularly delete your cookies and browser history manually. Section 4 Further Functions and Services of Our Website (1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this, you will generally need to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply. (2) In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. (3) Furthermore, we may share your personal data with third parties if participation in promotions, contests, contract conclusions, or similar services are offered by us jointly with partners. You will receive more detailed information about this when you provide your personal data or below in the description of the offer. (4) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the service. Section 5 Objection to or Withdrawal of Consent to the Processing of Your Data (1) If you have given your consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the lawfulness of processing your personal data after you have communicated it to us. (2) If we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the following description of the functions. When exercising such an objection, we ask that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or demonstrate to you our compelling legitimate grounds for continuing the processing. (3) You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: info@staycosy-apartments.de, Regitz & Merkel GbR, Albert Maier Strasse 22, 88045 Friedrichshafen. § 6 Use of the comment function You can post public comments on certain offers on our website. Your comment will be published with your chosen username. We recommend using a pseudonym instead of your real name. Providing a username and email address is required; all other information is voluntary. When you post a comment, we also store your IP address, which we delete after one week. We need to store this information to defend ourselves against liability claims in the event of potentially unlawful content being published. We need your email address to contact you if a third party objects to your comment as being unlawful. The legal basis is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Comments are not reviewed before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties. § 7 Use of Google Analytics (1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. (2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. (3) You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout. Alternatively, instead of using the browser plug-in, or if you are using a browser on a mobile device, please click on the following link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you will need to click this link again: Deactivate Google Analytics (4) This website uses Google Analytics with the extension "_anonymizeIp()". This shortens IP addresses before further processing, thus preventing them from being linked to a specific individual. Therefore, any personal data collected about you is immediately anonymized and the personal data is promptly deleted. (5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics we obtain allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 Sentence 1 lit. f GDPR. (6) Third-party provider information: Google Dublin, Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4, Ireland, Fax: 353 (1) 436 1001. Terms of Service: www.google.com/analytics/terms/de.html, Privacy Overview: www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: www.google.de/intl/de/policies/privacy. (7) This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data", "Personal Data". § 8 Use of Social Media Plugins (1) We currently use the following social media plugins: Facebook, Instagram, Google , Twitter. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to the plugin providers. You can identify the plug-in provider by the marking on the box, which displays their initial or logo. We offer you the option to communicate directly with the plug-in provider via the button. The plug-in provider only receives information that you have accessed the corresponding page of our website if you click on the marked field and thereby activate it. In addition, the data specified in Section 3 of this declaration will be transmitted. According to the respective providers, in the case of Facebook, the IP address is anonymized immediately after collection in Germany. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the USA for US-based providers). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box. (2) We have no influence on the data collected or the data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, or the storage periods. We also have no information regarding the deletion of the collected data by the plug-in provider. (3) The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact the respective plug-in provider. The plug-ins allow you to interact with social networks and other users, enabling us to improve our services and make them more interesting for you. The legal basis for the use of the plug-ins is Article 6(1)(f) GDPR. (4) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, the data we collect will be directly associated with your existing account with that provider. If you click the activated button and, for example, share the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out of social networks regularly after use, and especially before activating the button, as this will prevent the data from being associated with your profile on the plug-in provider's platform. (5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers, which are listed below. There you will also find further information on your rights and settings options for protecting your privacy. (6) Addresses of the respective plug-in providers and URLs to their privacy policies: a) [Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; Further information on data collection: www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has committed to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. b) Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; www.google.com/policies/privacy/partners/; Google has committed to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. Section 9 Integration of YouTube Videos (1) We have integrated YouTube videos into our online service. These videos are stored on www.YouTube.com and can be played directly from our website. All videos are integrated in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission. (2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in Section 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to have your activity associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses it for advertising, market research, and/or to tailor its website to user needs. This analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube. (3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. Section 10 Integration of Google Maps (1) We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. (2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google. (3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your related rights and settings options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. § 11 Use of Google AdWords Conversion (1) We use the Google AdWords service to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). We can use the data from advertising campaigns to determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to ensure fair billing of advertising costs. (2) These advertising materials are delivered by Google via so-called "ad servers." For this purpose, we use ad server cookies, which allow us to measure certain parameters for success measurement, such as ad impressions or user clicks. If you access our website via a Google ad, Google AdWords will store a cookie on your computer. These cookies typically expire after 30 days and are not intended to personally identify you. The following data is generally stored in this cookie for analysis purposes: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted). (3) These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. assigned. Cookies cannot therefore be tracked across the websites of AdWords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses allow us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, and in particular, we cannot identify users based on this information. (4) Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our current knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will learn and store your IP address. (5) You can You can prevent participation in this tracking process in several ways: a) by adjusting your browser settings accordingly; in particular, blocking third-party cookies will prevent you from receiving ads from third-party providers; b) by disabling conversion tracking cookies by configuring your browser to block cookies from the domain "www.googleadservices.com" (www.google.de/settings/ads). This setting will be deleted if you clear your cookies. c) by disabling interest-based ads from providers participating in the "About Ads" self-regulatory campaign via www.aboutads.info/choices. This setting will also be deleted if you clear your cookies. d) by permanently disabling tracking in your Firefox, Internet Explorer, or Google Chrome browser via www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to fully utilize all the features of this service. (6) The legal basis for processing your data is Article 6(1)(f) GDPR. You can find further information on data protection at Google here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. § 12 Remarketing In addition to AdWords Conversion, we use the Google Remarketing application. This is a process by which we aim to re-engage with you. Through this application, our advertisements can be displayed to you during your subsequent internet use after you have visited our website. This is done using cookies stored in your browser, which Google uses to record and analyze your usage behavior when visiting various websites. This allows Google to recognize your previous visit to our website. According to Google, the data collected for remarketing purposes is not merged with any personal data that Google may have stored about you. In particular, Google states that pseudonymization is used in remarketing. § 13 Facebook Custom Audiences (1) Furthermore, the website uses the "Custom Audiences" remarketing function of Facebook Inc. ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the Facebook social network or other websites that also use this process. Our aim is to show you advertising that is relevant to you in order to make our website more interesting for you. (2) Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you to the best of our knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding page of our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or are not logged in, it is possible that the provider will obtain and store your IP address and other identifying information. (3) Logged-in users can deactivate the "Facebook Custom Audiences" function at www.facebook.com/settings/. (4) The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy. Section 15 Piwik This website uses Piwik, an open-source software for the statistical analysis of user access. Piwik uses so-called “cookies,” text files that are stored on users' computers and enable an analysis of website usage. The information generated by the cookie about the use of this website is stored on the provider's server in Germany. The IP address is anonymized immediately after processing and before being stored. Users can prevent the installation of cookies by adjusting their browser settings; however, the provider points out that in this case, users may not be able to fully utilize all the functions of this website.