Data protection is a matter of particular concern to Travel Processing + Automation GmbH. Our efforts to comply with the requirements of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act in its latest version are primarily aimed at respecting your privacy and personal data. <\/p>\n\n\n\n
For modern companies such as Travel Processing + Automation GmbH, the use of electronic data processing systems is indispensable today. In this regard, we naturally make every effort to comply with the relevant legal regulations. <\/p>\n\n\n\n
In principle, it is possible to use the websites of Travel Processing + Automation GmbH without providing any personal data. However, should a data subject wish to make use of specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally seek the consent of the data subject.<\/p>\n\n\n\n
Under no circumstances will we sell or rent your personal information to third parties for their marketing or other purposes. If you do not agree with the provisions of this privacy policy, please do not send us any personal data.<\/p>\n\n\n\n
1. General \/ Definitions<\/strong><\/p>\n\n\n\n This privacy policy is based on the terminology of the GDPR and is intended to be easy to read and understand for everyone. We would therefore like to explain various terms in advance:<\/p>\n\n\n\n a) Personal data<\/strong><\/p>\n\n\n\n Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the \u2018data subject\u2019). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.<\/p>\n\n\n\n b) Data subject<\/strong><\/p>\n\n\n\n A data subject is any identified or identifiable natural person whose personal data is processed by the controller.<\/p>\n\n\n\n c) Processing<\/strong><\/p>\n\n\n\n Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, alignment or combination, restriction, erasure or destruction.<\/p>\n\n\n\n d) Restriction of processing<\/strong><\/p>\n\n\n\n Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.<\/p>\n\n\n\n e) Profiling<\/strong><\/p>\n\n\n\n Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person\u2019s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or movements.<\/p>\n\n\n\n f) Pseudonymisation<\/strong><\/p>\n\n\n\n Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.<\/p>\n\n\n\n g) Controller <\/strong><\/p>\n\n\n\n The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.<\/p>\n\n\n\n h) Data processor<\/strong><\/p>\n\n\n\n A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.<\/p>\n\n\n\n i) Recipient<\/strong><\/p>\n\n\n\n A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether they are a third party or not. However, public authorities which may receive personal data in the framework of a specific inquiry mandate under Union law or the law of the Member States shall not be regarded as recipients.<\/p>\n\n\n\n j) Third party<\/strong><\/p>\n\n\n\n A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.<\/p>\n\n\n\n k) Consent<\/strong><\/p>\n\n\n\n Consent means any freely given, specific, informed and unambiguous indication of the data subject\u2019s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.<\/p>\n\n\n\n 2. Information on the collection of personal data<\/strong><\/p>\n\n\n\n (1) Below, we provide information on the collection of personal data when using our website. Personal data is any data that relates to you personally, e.g. name, address, email addresses, user behaviour, etc.<\/p>\n\n\n\n (2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is <\/p>\n\n\n\n Travel Processing + Automation GmbH<\/strong> (3) When you contact us by email or via a contact form, the data you provide (your email address, and where applicable your name and telephone number) is automatically stored by us in order to answer your enquiries. Such personal data, provided voluntarily by a data subject to the data controller, is stored exclusively for the purposes of processing or contacting the data subject. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.<\/p>\n\n\n\n (4) If we use contracted service providers for individual functions of our website or wish to use your data for advertising purposes, we will provide detailed information below regarding the respective processes. We will also specify the criteria for the storage period.<\/p>\n\n\n\n (5) As the data controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via this website. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide personal data to us via alternative means, such as by telephone.<\/p>\n\n\n\n (6) As a responsible company, we do not use automated decision-making or profiling.<\/p>\n\n\n\n 3. Your rights<\/strong><\/p>\n\n\n\n (1) You have the following rights in relation to us regarding your personal data:<\/p>\n\n\n\n \u2013 Right of access:<\/strong><\/p>\n\n\n\n Any data subject affected by the processing of personal data has the right, granted by the GDPR, to obtain from the controller, at any time and free of charge, information regarding the personal data stored about them and a copy of this information. Furthermore, the European legislator has granted the data subject the right to information regarding the following:<\/p>\n\n\n\n In addition, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject is also entitled to receive information about the appropriate safeguards in connection with the transfer.<\/p>\n\n\n\n If a data subject wishes to exercise this right of access, they may contact a member of staff of the controller at any time.<\/p>\n\n\n\n \u2013 Right to withdraw consent under data protection law:<\/strong><\/p>\n\n\n\n Any data subject affected by the processing of personal data has the right to withdraw their consent to the processing of personal data at any time. <\/p>\n\n\n\n If a data subject wishes to exercise this right to withdraw consent, they may contact a member of staff of the data controller at any time via any means of communication.<\/p>\n\n\n\n \u2013 Right to rectification:<\/strong><\/p>\n\n\n\n The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed \u2013 including by means of providing a supplementary statement.<\/p>\n\n\n\n If a data subject wishes to exercise this right of access, they may contact a member of staff of the data controller at any time.<\/p>\n\n\n\n \u2013 Right to erasure \/ Right to be forgotten:<\/strong><\/p>\n\n\n\n The data subject has the right to request that the controller erase personal data concerning them without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:<\/p>\n\n\n\n If a data subject wishes to exercise this right to erasure \/ right to be forgotten, they may contact a member of staff of the controller at any time.<\/p>\n\n\n\n If we have made the personal data public and are obliged to erase it in accordance with Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who process the personal data that a data subject has requested the erasure of all links to such personal data or of copies or replications of such personal data. Our staff will take the necessary steps.<\/p>\n\n\n\n \u2013 Right to restriction of processing:<\/strong><\/p>\n\n\n\n The data subject has the right to request that the controller restrict processing if one of the following conditions is met:<\/p>\n\n\n\n If a data subject wishes to exercise this right to restriction of processing, they may contact a member of staff of the controller at any time.<\/p>\n\n\n\n \u2013 Right to object to processing:<\/strong><\/p>\n\n\n\n Any data subject affected by the processing of personal data has the right, granted by the GDPR, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.<\/p>\n\n\n\n In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.<\/p>\n\n\n\n Where we process personal data for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data for the purposes of such marketing. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to us processing their data for direct marketing purposes, we will no longer process the personal data for these purposes.<\/p>\n\n\n\n Furthermore, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.<\/p>\n\n\n\n To exercise the right to object, the data subject may contact any member of staff directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002\/58\/EC, to exercise their right to object by means of automated procedures using technical specifications.<\/p>\n\n\n\n \u2013 Right to data portability:<\/strong><\/p>\n\n\n\n <\/strong>The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and they have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, provided that<\/p>\n\n\n\n When exercising their right to data portability in accordance with Article 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, provided that this is technically feasible and does not adversely affect the rights and freedoms of others.<\/p>\n\n\n\n If a data subject wishes to exercise this right to data portability, they may contact a member of staff of the controller at any time.<\/p>\n\n\n\n \u2013 Automated decision-making in individual cases, including profiling<\/strong><\/p>\n\n\n\n Any data subject affected by the processing of personal data has the right, as granted by the GDPR, not to be subject to a decision based solely on automated processing \u2014 including profiling \u2014 which produces legal effects concerning them or similarly significantly affects them, provided that the decision <\/p>\n\n\n\n (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or <\/p>\n\n\n\n (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject\u2019s rights and freedoms and legitimate interests; or <\/p>\n\n\n\n (3) is based on the data subject\u2019s explicit consent.<\/p>\n\n\n\n If the decision is necessary for the conclusion or performance of a contract between the data subject and the controller, or is made with the data subject\u2019s explicit consent, we shall take appropriate measures to safeguard the data subject\u2019s rights and freedoms as well as their legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.<\/p>\n\n\n\n If the data subject wishes to exercise rights relating to automated decisions, they may contact a member of staff of the data controller at any time.<\/p>\n\n\n\n (2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The supervisory authority responsible for our company is as follows:<\/p>\n\n\n\n Bavarian State Office for Data Protection Supervision\u00a0<\/strong> 4. Collection of personal data when visiting our website \/ Cookies<\/strong><\/p>\n\n\n\n (1) When you use our website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Article 6(1)(f) of the GDPR):<\/p>\n\n\n\n \u2013 IP address<\/p>\n\n\n\n \u2013 Date and time of the request<\/p>\n\n\n\n \u2013 Time zone difference from Greenwich Mean Time (GMT)<\/p>\n\n\n\n \u2013 Internet service provider of the accessing system<\/p>\n\n\n\n \u2013 Content of the request (specific page)<\/p>\n\n\n\n \u2013 Access status\/HTTP status code<\/p>\n\n\n\n \u2013 Amount of data transferred in each case<\/p>\n\n\n\n \u2013 Website from which the request originates (referrer)<\/p>\n\n\n\n \u2013 Browser<\/p>\n\n\n\n \u2013 Operating system and its interface<\/p>\n\n\n\n \u2013 Language and version of the browser software.<\/p>\n\n\n\n (2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.<\/p>\n\n\n\n (3) Use of cookies:<\/p>\n\n\n\n 1. A distinction is generally made between the following types\/functions of cookies:<\/p>\n\n\n\n a) Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.<\/p>\n\n\n\n b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time via your browser\u2019s security settings.<\/p>\n\n\n\n c) Essential cookies are those that are strictly necessary for the operation of a website.<\/p>\n\n\n\n d) Statistics, marketing or personalisation cookies are used, amongst other things, for audience measurement and, for example, when a user\u2019s interests or behaviour are to be stored in a user profile. This process is also referred to as \u2018tracking\u2019. Where we use cookies or \u2018tracking\u2019 services, we will inform you separately in our privacy policy or when seeking your consent.<\/p>\n\n\n\n e) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.<\/p>\n\n\n\n f) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.<\/p>\n\n\n\n g) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data regardless of the browser you use and do not have an automatic expiry date. If you do not wish for Flash cookies to be processed, you must install a suitable add-on, e.g. \u2018Better Privacy\u2019 for Mozilla Firefox (https:\/\/addons.mozilla.org\/de\/firefox\/addon\/betterprivacy\/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private browsing mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.<\/p>\n\n\n\n 2. In principle, the data processed using cookies is processed on the basis of our legitimate interests (Art. 6(1)(f)) or, where the use of cookies is necessary to fulfil our contractual obligations (Art. 6(1)(b)). Where we ask for your consent, the legal basis for processing the data is the consent you have given (Art. 6(1)(a)).<\/p>\n\n\n\n 3. You are, of course, free to withdraw your consent at any time or to object to the processing of your data via cookie technologies (\u2018opt-out\u2019). You can initially exercise your right to object via your browser settings. Objection to the use of cookies for online marketing purposes can also be expressed via a variety of services, particularly in the case of tracking, via the US website http:\/\/www.aboutads.info\/choices\/<\/a> or the EU website http:\/\/www.youronlinechoices.com\/<\/a>, or generally at http:\/\/optout.aboutads.info<\/a>.<\/p>\n\n\n\n 5. Further functions and services on our website<\/strong><\/p>\n\n\n\n (1) In addition to the purely informational use of our website, we offer various services which you may use if you are interested. To do so, you will generally need to provide further personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.<\/p>\n\n\n\n (2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.<\/p>\n\n\n\n (3) The hosting services we use are intended to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we utilise for the purpose of operating this online service. (4) Furthermore, we may pass on your personal data to third parties if promotional campaigns, competitions, contract conclusions or similar services are offered by us in conjunction with partners. You will receive further information on this when providing your personal data or in the description of the service below.<\/p>\n\n\n\n (5) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this in the description of the service.<\/p>\n\n\n\n Trans-Atlantic Data Privacy Framework (TADPF): Under the so-called \u201cTrans-Atlantic Data Privacy Framework\u201d (TADPF), the European Commission has also recognised the level of data protection for certain companies based in the USA. You can find the list of certified companies and further information on the US Department of Commerce website at https:\/\/www.dataprivacyframework.gov\/<\/a>. Information in German and other languages can be found on the European Commission\u2019s website: https:\/\/commission.europa.eu\/law\/law-topic\/data-protection\/international-dimension-data-protection\/eu-us-data-transfers_de<\/a>. We will also inform you about the companies we use that are certified under the Trans-Atlantic Data Privacy Framework.<\/p>\n\n\n\n 6. Data protection in relation to job applications<\/strong><\/p>\n\n\n\n The data controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case where an applicant submits the relevant application documents to the data controller electronically, for example by email or via a contact form on the website. If the data controller enters into an employment contract with an applicant, the data provided will be stored for the purpose of administering the employment contract in accordance with the statutory provisions. If the data controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted, provided that no other legitimate interests of the data controller preclude such deletion. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).<\/p>\n\n\n\n The processing of applicant data is carried out to fulfil our (pre-)contractual obligations within the framework of the application process within the meaning of Article 6(1)(b) GDPR and Article 6(1)(f) GDPR, provided that data processing becomes necessary for us, for example, in the context of legal proceedings (in Germany, Section 26 BDSG also applies).<\/p>\n\n\n\n 7. Objection or withdrawal of consent to the processing of your data<\/strong><\/p>\n\n\n\n (1) If you have given your consent to the processing of your data, you may withdraw this consent at any time and via any means of communication. Such a withdrawal affects the lawfulness of the processing of your personal data from the moment you have notified us of it.<\/p>\n\n\n\n (2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case where the processing is not necessary, in particular, for the performance of a contract with you, as we will explain in the subsequent description of the functions. When exercising such an objection, we ask you to state the reasons why we should not process your personal data as we have done. In the event of a justified objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.<\/p>\n\n\n\n (3) You may, of course, object at any time to the processing of your personal data for the purposes of advertising and data analysis. You may contact us regarding your objection to advertising at the address provided in section 2(2).<\/p>\n\n\n\n 8. Legal or contractual requirements for the provision of personal data \/ Necessity for the conclusion of a contract \/ Consequences of non-provision \/ Erasure<\/strong><\/p>\n\n\n\n (1) We would like to inform you that the provision of personal data is in some cases required by law. However, it may also be the case that a data subject must provide us with personal data in order for a contract to be performed. Failure to provide such data would mean that the contract could not be concluded. Our staff are happy to assist with any questions relating to specific cases. <\/p>\n\n\n\n (2) The data we process will be deleted or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons. 9. Social media plugins<\/strong><\/p>\n\n\n\n 1. Use of social media plugins<\/p>\n\n\n\n (1) We currently use the following social media plugins: <\/p>\n\n\n\n LinkedIn <\/p>\n\n\n\n You can identify the plug-in provider by the label on the box, which shows its initial letter or logo. We provide you with the option to communicate directly with the plug-in provider via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the relevant website of our online service. In addition, the data mentioned in section 4 of this statement will be transmitted. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). As the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser\u2019s security settings before clicking on the greyed-out box.<\/p>\n\n\n\n (2) We have no influence over the data collected or the data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by the plug-in provider.<\/p>\n\n\n\n (3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and\/or the needs-based design of its website. Such analysis is carried out in particular (including for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our service and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.<\/p>\n\n\n\n (4) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly linked to your existing account with the plug-in provider. If you click the activated button and, for example, share the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but particularly before activating the button, as this will help you avoid any association with your profile on the plug-in provider\u2019s site.<\/p>\n\n\n\n (5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers, which are provided below. There you will also find further information on your rights in this regard and settings options for protecting your privacy.<\/p>\n\n\n\n (6) Addresses of the respective plug-in providers and URLs to their privacy policies:<\/p>\n\n\n\n a) LinkedIn Inc., 1000 W Maude Sunnyvale, California 94085, USA; https:\/\/www.linkedin.com\/legal\/privacy-policy. LinkedIn has submitted to the Trans-Atlantic Data Privacy Framework.<\/p>\n\n\n\n 10. Plugins and tools<\/strong><\/p>\n\n\n\n 1. Yoast SEO<\/p>\n\n\n\n (1) We use plugins from Yoast SEO on our website. This is a service provided by Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, The Netherlands, Tel: +31 (0)24 82 00 337 (Chamber of Commerce \/ KvK: 55404367, VAT Number: NL851692540B01).<\/p>\n\n\n\n (2) This plugin handles the complete technical optimisation of our web pages for search engines. It also assists with content development. For further information, please refer to Yoast BV\u2019s privacy policy, which you can view at https:\/\/yoast.com\/privacy-policy\/.<\/p>\n\n\n\n (3) You can prevent the storage of cookies by adjusting your browser settings accordingly; however, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent.<\/p>\n\n\n\n (4) In this respect, we process users\u2019 personal data on the basis of our legitimate interests, i.e. our interest in the analysis, optimisation and commercial operation of our online offering within the meaning of Article 6(1)(f) of the GDPR.<\/p>\n\n\n\n 2. Cookiebot<\/p>\n\n\n\n (1) We use \u201cCookiebot\u201d as our \u201ccookie banner\u201d. \u201cCookiebot\u201d is a product of Usercentrics A\/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as \u201cUsercentrics\u201d. 3. Forms with WPForms<\/p>\n\n\n\n (1) We use the WordPress plugin WPForms on our website to provide online forms, in particular contact, enquiry, registration or other input forms. When you use a form, we process the data you enter into the respective form. This may include, in particular, your name, email address, telephone number, message text, selected form options, uploaded files and any other details requested in the respective form.<\/p>\n\n\n\n (2) The processing is carried out in order to receive, process and respond to your enquiry, to provide the requested function or \u2014 where applicable \u2014 to carry out pre-contractual or contractual measures. Depending on the purpose of the form, the legal basis is Article 6(1)(b) GDPR, Article 6(1)(f) GDPR or, where consent is obtained, Article 6(1)(a) GDPR.<\/p>\n\n\n\n (3) The form entries are processed in our WordPress installation or on our hosting provider\u2019s systems. In addition, form content may be transmitted by email to the relevant recipients within our organisation. In doing so, the respective email and hosting service providers used may also have access to the data. Further transmission to third parties only takes place if this is necessary for the processing of your enquiry, you have given your consent, or there is a legal obligation to do so.<\/p>\n\n\n\n (4) We store form enquiries only for as long as is necessary to process the relevant matter. Statutory retention obligations remain unaffected.<\/p>\n\n\n\n 4. Multilingual forms with WPForms Multilingual<\/p>\n\n\n\n (1) We use WPForms Multilingual to provide forms in multiple languages. This allows form titles, field names, notes, confirmation messages and email notifications to be displayed in different language versions.<\/p>\n\n\n\n (2) Where you use a multilingual form, the same personal data that you enter into the relevant form will be processed. The multilingual display serves to present the form to you in the appropriate language version and to enable communication in the selected language. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing our website and forms in a user-friendly, comprehensible and multilingual manner.<\/p>\n\n\n\n 5. PDF generation with WPForms PDF<\/p>\n\n\n\n (1) We use WPForms PDF to generate PDF documents from certain form submissions. This may be used, for example, to document an enquiry, create confirmations, form summaries, applications, certificates, contract documents or similar documents.<\/p>\n\n\n\n (2) In doing so, the personal data entered in the relevant form may be transferred to a PDF document. The PDF may be stored within our WordPress installation, made available in the form management section or \u2014 provided this has been set up accordingly \u2014 sent by email to you or to the relevant recipients within our organisation.<\/p>\n\n\n\n (3) Processing is carried out to handle your enquiry, to document the process or to provide the requested documents. The legal basis is, depending on the purpose, Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Our legitimate interest lies in the orderly, traceable and efficient processing of form-based procedures.<\/p>\n\n\n\n (4) PDF documents are only stored for as long as is necessary for the respective purpose. Where statutory retention periods apply, storage shall continue for the duration of these periods.<\/p>\n\n\n\n 6. User registration with WPForms User Registration<\/p>\n\n\n\n (1) We use WPForms User Registration to create user accounts on our website via forms or to update existing user profiles. When you use a registration or profile form, we process the information required for this purpose. This may include, in particular, your name, username, email address, password, profile details, profile picture and any other information requested in the relevant form.<\/p>\n\n\n\n (2) Processing takes place for the purpose of creating, managing and providing your user account, as well as for the authentication and use of protected areas or functions of the website. The legal basis is Article 6(1)(b) of the GDPR. Insofar as voluntary additional information is processed, this is done on the basis of Article 6(1)(a) of the GDPR or Article 6(1)(f) of the GDPR.<\/p>\n\n\n\n (3) The registration data you enter is stored in our WordPress installation and assigned to your user profile. You may request the deletion of your user account, provided that there are no legal retention obligations or overriding legitimate grounds to the contrary.<\/p>\n\n\n\n 7. Multilingual website with WPML Multilingual CMS<\/p>\n\n\n\n (1) We use WPML Multilingual CMS to provide our website in multiple languages. WPML enables the management and display of language versions of our content, menus, pages, posts and other website components.<\/p>\n\n\n\n (2) When you visit our website, we may process information regarding which language version you are using or which language setting is required to display the website. Depending on the configuration, technically necessary cookies or comparable technologies may be used for this purpose, for example to store the current language or to perform a language redirection. This processing is necessary to provide the selected or appropriate language version of the website. The legal basis is Article 6(1)(f) of the GDPR and, insofar as technically necessary cookies are concerned, Section 25(2) of the TDDDG.<\/p>\n\n\n\n (3) Our legitimate interest lies in the user-friendly and technically functional provision of a multilingual website.<\/p>\n\n\n\n 8. WPML String Translation<\/p>\n\n\n\n (1) We use WPML String Translation to translate text elements of our website that are not directly contained within pages or posts. These may include, in particular, menu texts, form instructions, system messages, buttons, widget titles, theme texts or plugin texts.<\/p>\n\n\n\n (2) The processing serves exclusively to enable the multilingual display of the website. As a rule, no additional personal data is collected from website visitors. Where individual translatable texts contain personal content, this is processed within the scope of the respective website function.<\/p>\n\n\n\n (3) The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the complete, comprehensible and consistent multilingual presentation of our website.<\/p>\n\n\n\n 9. WPML SEO<\/p>\n\n\n\n (1) We use WPML SEO to manage search engine-relevant content on our multilingual website across different language versions. In particular, this allows us to maintain page titles, meta descriptions, URL structures, SEO fields and similar technical or editorial details in multiple languages.<\/p>\n\n\n\n (2) The processing serves to ensure the correct technical and linguistic presentation of our website in search engines and social media previews. As a rule, no additional personal data is collected from website visitors in this process. Insofar as SEO fields exceptionally contain personal data, this is processed in the context of publishing the respective website content.<\/p>\n\n\n\n (3) The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the discoverability, technical optimisation and linguistically correct presentation of our website.<\/p>\n\n\n\n\n
Rochusstra\u00dfe 4
82166 Gr\u00e4felfing\u00a0<\/strong><\/p>\n<\/blockquote>\n\n\n\n\n
\n
\n
\n
\n
Promenade 18
91522 Ansbach
Tel.: +49 (0)981 \/ 180093-0
Fax: +49 (0)981 \/ 180093-800
Email:poststelle@lda.bayern.de<\/a><\/p>\n<\/blockquote>\n\n\n\n
In doing so, we, or our hosting provider, process inventory data, contact details, content data, contractual data, usage data, meta-data and communication data relating to customers, prospective customers and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Article 6(1)(f) of the GDPR in conjunction with Article 28 of the GDPR.<\/p>\n\n\n\n
In accordance with legal requirements, data is retained for a period of 10 years in particular, pursuant to Sections 147(1) AO, 257(1) nos. 1 and 4, (4) of the German Commercial Code (HGB) (books, records, management reports, accounting documents, trading ledgers, documents relevant for taxation, etc.) and for 6 years in accordance with Section 257(1) nos. 2 and 3, (4) of the German Commercial Code (HGB) (business correspondence).<\/p>\n\n\n\n
(2) Through the \u201cCookiebot\u201d function, we inform the user about the use of cookies on the website and enable the user to make a decision regarding their use.
(3) If the user consents to the use of cookies, the following data is automatically logged by Usercentrics:
\u2022 The user\u2019s anonymised IP address;
\u2022 Date and time of consent;
\u2022 User agent of the end user\u2019s browser;
\u2022 The provider\u2019s URL;
\u2022 An anonymous, random and encrypted key.
\u2022 The user\u2019s accepted cookies (cookie status), which serve as proof of consent.
(4) The encrypted key and the cookie status are stored on the user\u2019s device via a cookie in order to establish the relevant cookie status when the page is visited in future. This cookie is automatically deleted after 12 months.
(5) This is used to fulfil a legal obligation under Article 6(1)(c) of the GDPR and our legitimate interest under Article 6(1)(f) of the GDPR. The legitimate interest lies in the user-friendliness of the website and in compliance with the legal requirements of the GDPR.
(6) The user can prevent or revoke the installation and storage of the cookie, and thus their consent to the cookie, at any time by adjusting their browser settings. Usercentrics provides further information via the following link: https:\/\/www.cookiebot.com\/de\/privacy-policy\/<\/a><\/p>\n\n\n\n