Privacy

We undertake to comply with statutory data protection regulations and strive to always adhere to the principles of data avoidance and data minimization.

Explanation of the terms
We have created our data protection declaration based on the principles of clarity and transparency. However, if you are unsure about the use of different terms, the corresponding definitions can be found here.

Legal basis for the processing of personal data
We only process your personal data such as your surname and first name, your e-mail address and IP address, etc. if there is a legal basis for this. According to the General Data Protection Regulation, three regulations in particular are eligible:

a) You have given us your consent to the processing of your personal data for one or more purposes, Art. 6 Paragraph 1 Clause 1 lit. a GDPR. In this context, you will be informed in detail by us about the purpose or purposes of the processing and your express consent will be documented with us.

b) The processing of your personal data is necessary to fulfill the contract or to carry out pre-contractual measures with you, Art. 6 Paragraph 1 Clause 1 lit. b GDPR.

c) The processing of personal data is necessary to protect our legitimate interests, unless your interests or fundamental rights and freedoms outweigh them, Art. 6 Paragraph 1 Clause 1 lit. f GDPR.

However, we will always point out the points at which your personal data is processed.

Transmission of personal data
Your personal data will not be passed on to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

a) You have your express consent in accordance with Art. 6 Paragraph 1 Point 1 lit. a GDPR,

b) the transfer in accordance with Art. 6 Paragraph 1 Point 1 lit. f The GDPR is obliged to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your information.

c) for the transfer according to Art. 6 Paragraph 1 Point 1 lit. c GDPR is a legal obligation

d) this is legally permissible and according to Art. 6 Paragraph 1 Point 1 lit. b The GDPR is required to process contractual relationships with you.

Storage period and disposal
We only store personal data that you provide to us for as long as is necessary for the purposes for which it was sent or is required by law. As soon as the goal has been achieved and / or the statutory retention periods have expired, we will delete or block the data. If you have given us your consent for a longer retention period, the data will be deleted after the period agreed in the consent or if you revoke your consent.

SSL encryption
For security reasons and to protect the transmission of confidential content, e.g. B. before inquiries that you send us as the website operator, SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http: //“ to „https: //“ and by the lock symbol in your browser line.

When SSL encryption is activated, the data you send to us cannot be read by third parties.

Collection and storage of personal data as well as their type and purpose
a) When visiting the website
When you visit our website, the browser used on your device automatically sends information to the host server on our website. This information is temporarily stored in a so-called log file. The following information is recorded and stored without your intervention until it is automatically deleted:

Time / date of the call
Operating system and browser of the respective customer
The URL is called
IP address of the customer / visitor (depending on the setting in the KAS)
URL through which your website was accessed (referrer)

The data mentioned are processed by us for the following purposes:

Ensuring a smooth connection to the website
Ensuring comfortable use of our website
Assessment of system security and stability

Data that can be used to draw conclusions about your person, such as B. the IP address are deleted after 42 days at the latest. If the data is retained after this period, this data is anonymized so that it can no longer be assigned to you.

Rights of the data subject
You have the following rights:

a) information
According to Article 15 GDPR, you have

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about you personally.

Cookies
We use cookies – small files with configuration information. They help to determine user-specific settings and to implement special user functions. Cookies are automatically created by your browser and stored on your device when you visit our website. However, cookies cannot personally identify you.

Most browsers automatically accept cookies based on the browser settings. However, you can configure your browser so that either no cookies are stored on your device or at least a message is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all functions of our website.

The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR required.

These cookies are automatically deleted after a defined period of time.

Rights of the data subject
You have the following rights:

a) information
According to Art. 15 GDPR you have the right to request information about your personal data processed by us. This right to information includes information about:

the processing purposes
the categories of personal data
the recipients or categories of recipients to whom your data has been or will be disclosed
the planned storage period or at least the criteria for determining the storage period
the existence of a right to correction, deletion, restriction of processing or objection
the existence of a right of appeal to a supervisory authority
the origin of your personal data, unless we have collected them
the existence of automated decision-making including profiling and, if necessary, meaningful information on their details

b) Correction
According to Art. 16 GDPR, you have the right to immediate correction of incorrect or incomplete personal data stored by us.

c) deletion
According to Art. 17 GDPR, you have the right to request that we delete your personal data immediately, unless further processing is necessary for one of the following reasons:

to exercise the right to freedom of expression and information
to fulfill a legal obligation that requires processing under the law of the European Union or the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible
for reasons of public interest in the area of ​​public health in accordance with Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impair it
for the establishment, exercise or defense of legal claims

d) restriction of processing
In accordance with Art. 18 GDPR, you can request that the processing of your personal data be restricted for one of the following reasons:

You dispute the accuracy of your personal data.
The processing is unlawful and you refuse to delete the personal data.
We no longer need the personal data for processing purposes, but you need them to assert, exercise or defend legal claims.
You object to the processing in accordance with Art. 21 Paragraph 1 GDPR.

e) briefing
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 Paragraph 1 and Art. 18 GDPR, we will inform all recipients to whom your personal data has been disclosed because this turns out to be impossible or involves a disproportionate effort. You can request that we inform you of these recipients.

f) Submission
You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format.

You also have the right to request the transfer of this data to a third party, provided that the processing was carried out using automated procedures and based on consent in accordance with Art. 6 Para. 1 S. 1 lit. a or Art. 9 Para. 2 lit. a or on a contract according to Art. 6 Para. 1 S. 1 lit. b GDPR is based.

g) Revocation
According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to us at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal. In future, we will no longer be allowed to continue processing data based on your revoked consent.

h) complaint
According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR.

i) contradiction
If your personal data is based on legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation. If you would like to make use of your right of revocation or objection, an email to info@villa-vosje.de is sufficient

j) Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effects on you or which significantly affects you in a similar manner. This does not apply if the decision

aa) is necessary for the conclusion or performance of a contract between you and us

bb) is permissible on the basis of legal provisions of the European Union or the member states to which we are subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests

cc) is made with your express consent
However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in aa) and cc), we take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on our part, to express our own point of view and to contest the Decision heard.

Collection of access data and log files

We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. GDPR data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider .

For security reasons (e.g. to investigate abusive or fraudulent activities or cyber attacks), log file information is stored for a maximum of 42 days and then deleted. Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.

Change of privacy policy
Should we change the data protection declaration, this will be indicated on the website and the registered customers will be informed of this by email.