Data protection

I. Preamble

For us, a trusting co-operation begins with the smallest details. For us, this naturally includes protecting your data from the very beginning. With this privacy policy, we would therefore like to inform you about the type, scope and purpose of the processing of your personal data that is generated when you visit our website and that we use in part to make our services as convenient as possible for our customers.

In doing so, we are guided by the provisions of the European Union's General Data Protection Regulation (hereinafter: GDPR), the German Federal Data Protection Act (hereinafter: BDSG) and the German Telemedia Act (hereinafter: TMG).

 

II General information

 

a. Controller responsible

The controller within the meaning of the GDPR is: GLC Glücksburg Consulting AG represented by the Executive Board: Prof. Martin Weigel Albert-Einstein-Ring 5 D-22761 Hamburg Phone: 040 - 85 40 06-0 Fax: 040 - 85 40 06-38 Email: info@glc-group.com

www.glc-group.com

 

b. Data Protection Officer

External Data Protection Officer (eDSB) ARCONDA SYSTEMS AG Frank Espenhain Sportallee 6 22335 Hamburg / Germany Phone: +49-40-823158-0 Fax: +49-40-823158-99 E-Mail: F.Espenhain(at)Arconda.ag

c. Definitions

The terms used in this privacy policy correspond to those of the GDPR and the BDSG. The main ones are

  • "personal data": any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4 No. 1 GDPR);
  • "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 no. 2 GDPR)
  • "third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data (Art. 4 no. 10 GDPR)
  • "Consent": any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her (Art. 4 No. 11 GDPR).

 

d. Types of data

We process the following types of data on our website in particular

  • Inventory data (data necessary for the establishment, content, amendment or termination of a contractual relationship; e.g. name and address)
  • Contact data (data under which you or your company can be contacted; e.g. email address or telephone number)
  • Content data (content of transmitted messages; e.g. texts that you enter, images, videos)
  • Usage data (technical information about, for example, access times and websites visited)
  • Communication data (data that gives us information about the communication channel, e.g. the browser you use, device information but also IP addresses)

In the context of business-related processing, the following types of data are also collected

  • Contract data (the contract text and subject matter, term, etc.)
  • Payment data (e.g. bank details and booking history)

 

e. Affected groups of persons & general purpose of processing

We collect personal data from users of this website. The data collected from you is processed to make this website available and to respond to contact enquiries. In addition, we collect some data for the purpose of reach measurement and to make our offer even more attractive for our customers. Please refer to the specific explanations in the course of this privacy policy to find out which data is specifically collected, the legal basis for this and how we process it.

 

f. Right of cancellation

Of course, you have the right to revoke your consent at any time without giving reasons in accordance with Art. 7 para. 3 GDPR with effect for the future. The cancellation is not bound to a specific form and is effective upon receipt and observed by us regardless of the medium used. However, for your convenience and ours, please send your cancellation to the following email address datenschutz@glc-group.com.

 

g. Cookies

Almost all websites today use various cookies so that the respective pages function as desired and the design and functions can be optimised for you. Cookies are information files that are transferred from our web server or third-party web servers to your web browser and stored there. They are stored there for later retrieval. The information files are specific information related to your respective device (PC, smartphone and browser used). However, this does not mean that we gain direct knowledge of your identity. Cookies are primarily used to make websites more user-friendly (e.g. they save login data or the language). Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

What types of "cookies" do we use?

This website uses transient and persistent cookies, the scope and function of which are explained below:

- Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. We therefore use these cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit. The session cookies are deleted when you log out or close the browser.

- Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

What can I do about the use of cookies?

Most browsers accept cookies automatically. If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Saved cookies can also be deleted in the browser's system settings. However, the exclusion of cookies can lead to functional restrictions of this online offer. Information on deactivating cookies in the most common browsers can be found under the following links:

Google Chrome: https: //support.google.com/accounts/answer/61416?hl=de Microsoft Internet Explorer: https: //support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Safari: https: //support.apple.com/kb/PH19214?locale=de_DE&viewlocale=de_DE Firefox: https: //support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Opera: https: //help.opera.com/de/latest/web-preferences/

h. General (advertising) objection

We would like to point out that you naturally always have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, even if you do not visit our website.

You also have the right to object to the processing of your personal data for the purpose of direct marketing in accordance with Art. 21 para. 2 GDPR. The objection is also not bound to a specific form and is effective and observed by us regardless of the medium used. However, for your convenience and ours, please send your cancellation to the following e-mail address: datenschutz(at)glc-group.com.

 

i. General deletion and blocking specification

We erase or block your personal data in accordance with Art. 17 and 18 GDPR. In particular, we will erase the data as soon as the purpose for which we originally collected the data no longer applies and there are no statutory retention obligations. For example, pursuant to Section 257 (1) HGB, we are legally obliged to retain trading books, inventories, opening balance sheets, annual financial statements, individual financial statements pursuant to Section 325 (2a), management reports, consolidated financial statements, group management reports and the work instructions and other organisational documents required to understand them, commercial letters and accounting vouchers for a period of 6 years. In the event of statutory retention obligations, we block the data so that we will only process it for the legally prescribed purpose.

 

j. Data security

To ensure the security of your data, we use the widespread Secure Socket Layer (SSL) method to transmit the website content and the data you enter. The data transmitted between you and our hosting provider is encoded using 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

 

III. Your rights

The purpose of our endeavours to protect your data is always to ensure that you have complete control over the information you provide. In addition to the rights described above, you therefore also have additional rights in relation to the personal data we hold about you, which we are pleased to describe in detail below.

 

a. Right to confirmation of processing

In accordance with Art. 15 GDPR, you have the right to obtain confirmation from us about the processing of your personal data.

 

b. Right to information

If we process your personal data, you also have the right to know which data we have in accordance with Art. 15 GDPR. We will provide you with the information in accordance with the requirements of Art. 15 GDPR.

 

c. Right to completion & rectification

In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right to have incomplete data stored by us completed.

 

d. Right to erasure

Pursuant to Art. 17 GDPR, you have the right to obtain from us the erasure of your personal data without undue delay, provided that one of the following points applies and no derogation pursuant to Art. 17 (2) and (3) GDPR applies:

  • The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2).
  • The personal data have been processed unlawfully.
  • The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Article 8(1)

 

e. Right to restriction of processing

Pursuant to Art. 18 GDPR, you have the right to obtain from us without undue delay the restriction of processing of your personal data where one of the following applies

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
  • the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We will inform you accordingly before a block is lifted.

 

f. Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you from us in a structured, commonly used and machine-readable format and to request that it be provided to a third party without hindrance. Restrictions to this right may result from Art. 20 GDPR.

 

g. Right to lodge a complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority. You can contact the competent authority at the following address The Hamburg Commissioner for Data Protection and Freedom of Information, Klosterwall 6, 20095 Hamburg, phone: 040 428544040, fax: 040 428 54 4000, e-mail: mailbox(at)datenschutz.hamburg.de.

 

IV. Processing for the purpose of technical functionality

 

a. Hosting of the website

In order to make this website available to you, we work together with a hosting provider. This provider supplies the infrastructure for the trouble-free operation of this website and carries out regular maintenance to ensure that your data is not lost. In order to guarantee the protection of your data and compliance with data protection standards, we have also obliged our hosting provider to maintain our high data protection standards as part of an order processing contract in accordance with Art. 28 GDPR. This provider processes inventory, contact, content, contract, usage and communication data of the users of this website on our behalf on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the maintenance, operation and security of this website.

In addition, usage data is generated each time our website is visited. This includes, in particular, the name of the website accessed, downloaded files, date and time of access, data volumes transferred, messages about successful access to the website, browser type and operating system used, the previously visited page, the IP address and the provider used. We or our hosting provider process this data on our behalf and on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in protection against misuse and for security reasons. The personal data is stored for a period of 7 days, with the exception of data whose further storage is required for the purpose of preserving evidence, and then automatically deleted.

 

b. Making contact via the contact form

If you would like to contact us, please use our contact form. We process the data collected there for the purpose of processing your contact enquiry in accordance with Art. 6 para. 1 lit. b GDPR. If we remain in business contact beyond this, your personal data may also be processed in a corresponding system as part of customer relationship management. If the data is no longer required after answering your enquiry, we will delete it, provided there are no legal archiving obligations.

Contacting us by email and telephone

When you contact us (by telephone or email), your data will be processed to process the contact enquiry and its handling in accordance with Art. 6 para. 1 lit. b) GDPR (necessary information in the context of pre-contractual measures) or in accordance with Art. 6 para. 1 lit. f) GDPR (legitimate interest in answering your enquiry). If you contact us by email, we will also store the content that you have sent us by email. If you provide us with details of communication channels (e.g. telephone number), we can also contact you via this communication channel in order to respond to your enquiry. The personal data transmitted by you will be used exclusively for the purpose for which you provided us with the data when contacting us.

We delete the data received in the course of contacting you as soon as it is no longer required to fulfil the purpose for which it was collected. This also applies to your voluntary information. It is in our legitimate interest to store the data together with the required data. In the case of personal data sent by e-mail or transmitted to us by telephone, the data will be deleted when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified, but no later than 1 month after the last contact. If a contract is concluded with you, the statutory retention periods apply.

 

c. Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This takes place primarily when an applicant submits relevant application documents to the controller by digital means, for example by email. If an employment relationship is subsequently established between the controller and the applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. The application documents will be automatically deleted 6 months after notification of the rejection decision if no employment contract is concluded between the controller and the applicant, provided that deletion does not conflict with any other legitimate interests of the controller. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

 

d. Booking enquiries

On our website you have the possibility to make an online reservation or booking of holiday accommodation in the Oberharz region. We will process the personal data you provide us with the enquiry for the purpose of processing your enquiry on the basis of Art. 6 para. 1 lit. b GDPR. See point IV in this privacy policy. See point V g. in this privacy policy.

 

e. Newsletter

If you would like to stay up to date on current products and information in the future, we offer you the opportunity to subscribe to our e-mail newsletter.

To ensure that no third party registers with your e-mail address, the registration procedure is designed as a so-called "double opt-in" procedure. After you have entered your e-mail address in the field provided and clicked the corresponding button to register, you will receive an e-mail from us containing a link to confirm your registration. By confirming the link, you also give your consent to the further use of your personal data required for sending the newsletter. For the purpose of verifiability, we log this registration and process the time of registration and confirmation, IP address and the e-mail address provided on the basis of our legitimate interest in the verifiability of a registration in accordance with Art. 6 para. 1 lit. f GDPR. We use the email address you provide and your name to send the newsletter and to address you personally. We process these on the basis of your consent in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 para. 2 no. 3 UWG, as well as on the basis of the legal authorisation in accordance with Section 7 para. 3 UWG.

If you no longer wish to receive the newsletter in future, you can cancel your subscription at any time. You will find an unsubscribe link at the end of each newsletter. Of course, you can also simply send us an e-mail to the following address:

After cancellation, we may store your name and e-mail address for up to 3 years on the basis of our legitimate interest in the verifiability of the consent previously given in accordance with Art. 6 para. 1 lit. f GDPR. The data is stored exclusively for this purpose and is blocked for use for other purposes: info(at)oberharz.de

 

f. Ordering brochures

We provide brochures for you to order on our website. If you order these via our website, you provide us with your surname, first name and address. We collect this data for the purpose of processing in accordance with Art. 6 para. 1 lit. b GDPR and forward it to our dispatch service provider Skorzak GmbH & Co KG, Direktmarketing-Dienstleistungen, Westerallee 155, 24941 Flensburg, Germany, to process the order. If the data is no longer required after processing, we and our service provider will delete it. An order processing contract has been concluded with the service provider.

 

V. Use of third-party services - technical functionality and information

Among other things, our website uses tools from companies based in the USA. These tools may transfer your personal data to US servers of the respective companies. In terms of EU data protection law, the USA is not a safe third country, as US companies are legally obliged to pass on personal data to US security authorities on request. Unfortunately, we have no control over the fact that US authorities have access to your data stored on US servers and process, analyse and store it.

 

a.Rapidmail

Description and purpose: We use rapidmail to send newsletters. The provider is rapidmail GmbH, Wentzingerstraße, 21, 79106 Freiburg, Germany. Among other things, rapidmail is used to organise and analyse the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on rapidmail's servers in Germany. If you do not wish to be analysed by rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website. For the purpose of analysis, the emails sent with rapidmail contain a so-called tracking pixel, which connects to the rapidmail servers when the email is opened. This allows us to determine whether a newsletter message has been opened. We can also use rapidmail to determine whether and which links in the newsletter message are clicked on. All links in the email are so-called tracking links that can be used to count your clicks.

Legal basis: The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR.

Recipient : The recipient of the data is rapidmail GmbH.

Transfer to third countries : Data is not transferred to third countries.

Duration: The data stored by us as part of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the servers of rapidmail after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

Revocation option: You have the option of revoking your consent to data processing at any time with effect for the future. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

Further data protection information: For more information, please refer to rapidmail's data security information at:https://www.rapidmail.de/datensicherheit. For more information on the analysis functions of rapidmail, please refer to the following link: https: //www.rapidmail.de/wissen-und-hilfe

 

b. Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. (2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. (3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http: //tools.google.com/dlpage/gaoptout?hl=de.

(4) For data processing in connection with Google Analytics by Google, our company has concluded a data processing agreement with the service provider on the basis of the EU standard data protection clauses.

(5) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Terms of use: http: //www.google.com/analytics/terms/de.html

Overview of data protection: http: //www.google.com/intl/de/analytics/learn/privacy.html

Privacy policy: http: //www.google.de/intl/de/policies/privacy

 

c. Google Adwords Conversion Tracking

We also use Google Conversion Tracking on our website on the basis of our legitimate interest in optimising our website and determining the success of an advertising campaign in accordance with Art. 6 para. 1 lit. f GDPR. The Google AdWords service places a cookie on your end device if you have reached our website by linking to a Google advert. The cookie is valid for 30 days and contains a unique identifier. As long as the cookie is valid, it can also be recognised by subsequent pages and used by Google for tracking purposes. With the help of conversion tracking, Google can provide its AdWords customers with statistics that provide information about the total number of users who have clicked on an advert and been redirected to a page with a conversion tracking tag. Tracking tag. However, it is not possible for AdWords customers to identify individual users.

Further information on data protection in the context of Google conversion tracking can be found at http://services.google.com/sitestats/de.html.

 

d. Google Analytics Remarketing

We also use the Google Analytics Remarketing service from Google on our website on the basis of our legitimate interest in personalised and target group-oriented advertising of our offer in accordance with Art. 6 para. 1 lit. f GDPR. Data from Google Analytics and AdWords can be merged. This allows us to show you adverts that we believe are more relevant to you.

Further information on Google's terms of use and data protection can be found at http://www.google.com/analytics/terms/de.htmlbzw. https://www.google.de/intl/de/policies/. Specific information on how Google Analytics Remarketing works can be found at: https: //www.google.de/intl/de/analytics/features/remarketing.html.

 

e. Cloudflare - CDN

We use a service of the provider Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107 (hereinafter: Cloudflare) on our website on the basis of our legitimate interest in optimisation, stability and protection against attacks on our online offering. All requests to our website are also transmitted to Cloudflare servers in the USA. Cloudflare uses this data exclusively to maintain its service and guarantees that the data will not be passed on to third parties.

Further information on Cloudflare's terms of use and data protection can be found at www.cloudflare.com/terms/ and https://www.cloudflare.com/security-policy/.

 

f. DS Destination Solutions GmbH - A company of the HRS Group

We use the booking system of DS Destination Solutions GmbH, Breslauer Platz 4, 50668 Cologne (HRS DS) for the brokerage and booking of accommodation providers. When you make a booking on our website, you consent to the storage and processing of your personal data by HRS DS for the purpose of processing the booking. Your personal data will be forwarded to HRS DS and processed. Furthermore, your data will be forwarded to the provider of the property that was booked. This storage and processing of the data takes place for the purpose of supporting and processing your booking and your authentication as well as for billing purposes between HRS DS and GLC Glücksburg Consulting AG as the property provider's intermediary partner. In the event of a booking, the data will be stored in accordance with the commercial retention periods of 10 years.

Further information on terms of use and data protection and the possible commissioning of third parties for data processing by HRS DS can be found at: https: //www.im-web.de/impressum.php#datenschu

g. Luca App

As a measure to contain the Corona pandemic, Tourismus-Service Friedrichskoog uses the Luca App from cultur4life GmbH, Charlottenstraße 59, D- 10117 Berlin. Further information on data processing in the context of the app can be found here.

 

h. Facebook Pixel

This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries, allowing the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised. The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the website operator. The use of Facebook pixels is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https: //www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/566994660333381. Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https: //www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook. You can find further information on protecting your privacy in Facebook's data protection information: https: //de-de.facebook.com/about/privacy/. You can also use the remarketing function "Custom Audiences" in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http: //www.youronlinechoices.com/de/praferenzmanagement/.

VI Use of third-party services - social bookmarks

Of course, oberharz.de is also represented on Facebook, Twitter, Instagram and YouTube. In order to give you the opportunity to network with us there, we have set corresponding links to the social media platforms. Clicking on the social buttons will take you directly to our social profile of the respective provider. This is a call-up of an external link in accordance with the point "Declaration on linking" in the legal notice.

As the operator of these company pages, we are jointly responsible with the operators of these networks within the meaning of Art. 4 No. 7 GDPR. When you visit our company pages on social networks, personal data is processed by the controllers. Further information can be found in the privacy policies of the third-party providers:

VII Privacy policy for online competitions

Thank you for your interest in our online competitions. The protection of your personal data is important to us. Below we inform you about how we process your data in the context of our competitions.

1. responsible body

The controller responsible for processing your data as part of our online competitions is

GLC Glücksburg Consulting AG

represented by the Executive Board: Prof. Martin Weigel on behalf of Tourist-Informationen Oberharz Albert-Einstein-Ring 5 D-22761 Hamburg Phone: 040 - 85 40 06-0 Fax: 040 - 85 40 06-38 Email: info@glc-group.com

www.glc-group.com

2. collection and processing of personal data

a) We collect the following personal data when you participate in our online competitions:

- Name

- e-mail address

- Telephone number (optional)

- Address (optional)

- Date of birth (optional)

This data will only be used to organise the competition. They are used to contact you in the event of a win and to ensure that the competition is properly organised.

b) Your data will be processed exclusively by the competition organiser. Your data will not be passed on to third parties unless this is necessary for the realisation of the competition. In the event of a win, the data required to provide the prize will be passed on to the relevant partner. These partners are carefully selected by us and are obliged to treat your data confidentially and to use it exclusively for the purpose of organising the competition.

3. storage period

Your personal data will be deleted after completion of the competition, unless there are statutory retention obligations or you have expressly consented to the further use of your data.

4 Your rights

You have the right to request information about the processing of your personal data, as well as the right to rectification, erasure or restriction of processing of your data. You also have the right to object to the processing of your data and the right to data portability.

To exercise your rights or if you have any questions about the processing of your data, please contact

GLC Glücksburg Consulting AG represented by the Management Board: Prof. Martin Weigel on behalf of Tourist-Informationen Oberharz Albert-Einstein-Ring 5 D-22761 Hamburg Phone: 040 - 85 40 06-0 Fax: 040 - 85 40 06-38 Email: info@glc-group.com

www.glc-group.com

5. updating the privacy policy This privacy policy may be updated to reflect changes in our privacy practices.

 

VIII Status of and changes to this privacy policy

Due to the further development of our website and offers as well as legal requirements, it may be necessary to change this privacy policy at any time. We therefore recommend that you visit this page regularly to stay informed of any changes. Status: 23.02.2024