data protection

PRIVACY POLICY

Information about the processing of your data
In accordance with Art. 12 of the General Data Protection Regulation (hereinafter referred to as the GDPR), we are obliged to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data and about your legal rights in this regard.

We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law.

We recommend that you read this privacy policy from time to time and take a printout or a copy for your documents.

Definitions

• In the following, website means all of the controller’s pages at www.7things.de;
• personal data means any information relating to an identified or identifiable natural person. A person is identifiable if they can be identified, either directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data is therefore, for example, a person’s name, email address and telephone number, but may also include information about preferences, hobbies and memberships;
• processing means operations or sets of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction;
• pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person;
• consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes in a particular case by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
• Google means Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.

Scope
This privacy policy applies to all pages of www.7things.de. It does not cover any linked websites of other providers.

Responsible provider
The following party is responsible for the processing of personal data within the scope of this privacy policy:

Munte GmbH & Co. KG

Hotel 7 Things

Universitätsallee 4

28359 Bremen

Fon: 0421 69677377

Fax: 0421 69655166

Mail: info@7things.de

Questions about data protection
If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

secjur GmbH
Steinhöft 9
20459 Hamburg
+49 40 228 599 520
dsb@secjur.com

Security
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.

Your rights
You have the following rights with regard to the personal data concerning you that you can assert against us:
• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to object to processing (Art. 21 GDPR),
• right to withdraw your consent (Art. 7(3) GDPR),
• right to receive the datain a structured, commonly used, machine-readable format (“data portability”) and
the right to transfer the data to another controller, if the prerequisites of Art. 20(1) (a), (b) GDPR are fulfilled (Art. 20 GDPR).

You can assert your rights by informing us using the contact details specified above under ‘Responsible provider’ or by contacting the data protection officer designated by us.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

Use of the website, access data
In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This is the following data:

• browser type/browser version,
• operating system used,
• language and version of the browser software,
• hostname of the accessing device,
• IP address,
• website from which the request comes,
• content of the request (specific page),
• date and time of the server request,
• access status/HTTP status code,
• referrer URL (website visited before),
• volume of data transferred,
• time zone difference from Greenwich Mean Time (GMT).

Temporary processing of the IP address by the system is necessary to make it technically possible to deliver the website to your device. This requires processing of your IP address for the duration of the session. The legal basis of such processing is Art. 6(1) Sentence 1(f) GDPR.

The access data is not used to identify individual users and is not combined with other data sources. The access data is deleted when it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context either. In principle, data is deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or so transformed that an assignment of the retrieving client is no longer possible.

The recording of data for the provision of the website and the processing of data in log files is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).You can send us your objection to the contact data provided under ‘Responsible provider’. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

Consent-Management-Tool “consentmanager

We have integrated the consent management tool "consentmanager" by Jaohawi AB (Håltgelvågen 1b, 72348 Västerås, Sweden (info@consentmanager.net) on our website in order to request consent for the use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give or refuse your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, coverage measurement and personalised advertising. You can use "consentmanager" to give or refuse your consent for all functions or to give your consent for individual purposes or individual functions. The settings you have made can also be changed by you afterwards. The purpose of integrating "consentmanager" is to allow users of our website to decide whether to set cookies and similar functionalities and to offer them the option of changing settings already made in the course of further use of our website. In the course of using "consentmanager", personal data as well as information of the end devices used, such as the IP address, are processed. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. c) or lit. f) GDPR. By processing your data, we comply with our legal obligations (e.g. obligation to provide proof of consent). Our legitimate interests in processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. After two years after the user settings have been made, you will be asked again for your consent. The user settings made will then be stored again for this period.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. In addition, you can also prevent data processing based on cookies as follows: by deactivating, restricting, or deleting cookies in the settings of your browser software or by opening the browser you are using in "private mode".

Cookies
In addition to the aforementioned access data, so-called cookies are stored in the internet browser of the device you use to access the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the device system and cannot execute programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or may occur for other purposes (e.g. analysis/evaluation of website usage).

a) Technically necessary cookies
Some elements of our website require that the retrieving browser can be identified even after a page change. This involves processing the following data in the cookies:
• language settings,
• items in shopping basket,
• login information.

The user data collected by technically necessary cookies is not processed to create user profiles.We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies arerequired for using the website. In particular,they enable us to recognise the device used when you return to the website.If you have an account with us, we use this cookie to recognise you on subsequent visits to the website; otherwise you would have to log in again each time you visited.The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. We use session cookies to make using our website more attractive and effective. Session cookies are deleted as soon as you log out or close your browser.

Most browsers are preset to automatically accept cookies. You can object to the processing of your data by cookies. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

b) Technically non-essential cookies
In addition, we also use cookies on the website which enable an analysis of users’ surfing behaviour. For example, this involves processing the following data in the cookies:
• entered search terms,
• frequency of page views,
• use of website functions.

These cookies are used to make using the website more efficient and attractive. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. The technically non-essential cookies are automatically deleted after a specified period, which may vary depending on the cookie.

You can object to the processing of your data by cookies. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). If you do not wish to use cookies, you have the option of changing your browser settings in order to generally or selectively block the placement of cookies or remove stored cookies. You can also have the corresponding information displayed before a cookie is placed. If you change the browser settings for the use of cookies or disable cookies, the functionality of this website may be restricted.

Where we integrate cookies from third-party providers into our website, we point this out to you separately below.

c) Flash cookies
HTML5 storage objects are also used, which are stored on the device you use (“Flash cookies”). These process the required data independently of the browser and do not have an automatic expiry date.The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. These cookies are used to make using the website more efficient and attractive.

You can object to the processing of your data by cookies. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). The transfer of Flash cookies cannot be prevented by adjusting your browser settings, but by changing your Flash Player settings. If you do not wish for Flash cookies to be used, please install an appropriate add-on in the browser you use, e. g. “Privacy Badger” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/privacy-badger17/).

You can also prevent the use of Flash cookies by opening your browser in ‘private mode’. Furthermore, you can regularly delete cookies and your browser history manually.

d) Cookie banner notice
When you visit the website, an information banner notifies you about the use of cookies for analysis purposes and refers you to this privacy policy. In this context, information is also provided about how the storage of cookies can be prevented by adjusting your browser settings.

Contacting our company
When contacting our company, e.g. by email, we will process the personal data provided by you so that we can respond to your enquiry.

In order for us to process enquiries submitted via the contact form on the website, it is essential that you provide a name or pseudonym, a phone number and a valid email address. At the moment when you submit the message to us, the following data will also be processed:
• IP address,
• date/time of registration.

The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If it is necessary to enter your data in order to conclude a contract, it may be impossible to conclude or execute the contract or to process the request if the data is not made available.

Processing the personal data from the form allows us alone to process the contact you make with us. Where you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data.

The data will not be transmitted to third parties in this context. The data is only processed in order to process the conversation. As soon as processing is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.

You have the possibility to object to the processing of your personal data for contact requests at any time.You cansend us your objection to the contact data provided under ‘Responsible provider’. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In particular, you have a right of objection if processing is not necessary to fulfil a contract with you, which is described by us in the previous description of the functions. In such a case, it may not be possible to continue processing the request. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

Processing and transmission of personal data for contractual purposes
We process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with our company. The legal basis from this results from Art. 6(1) Sentence 1(b) GDPR.If the data processing is necessary for the conclusion of a contract, the conclusion of the contract, the execution and/or the termination of a legal transaction with our company may be impossible if the data is not made available.

Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or erased, unless we are entitled to retain the data for a longer period and process it as required in the respective context on the basis of a consent granted by you (e.g. consent to the processing of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct advertising) or on the basis of justified interests (e.g. retention for asserting claims).

Data that is collected and processed as part of a contract initiation (last name, first name, telephone number or email address) will be deleted after one year at the latest, unless a contract is concluded.

Your personal data will be passed on if

• it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you) (Art. 6(1) Sentence 1(b) GDPR), or
• a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are expressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or
• there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR), or
• there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR), or
• we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR), or
• the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR), or
• we are authorised or even obliged to pursue overriding legitimate interests (Art. 6(1) Sentence 1(f) GDPR).

Your personal data will not be transmitted to other persons, companies or bodies unless you have effectively consented to such transmission. The legal basis of the processing is then Art. 6(1) Sentence 1(a) GDPR.

Processing and transmission of personal data in the online ordering system
If you wish to submit an order or booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, your address and your email address. The mandatory data required for order and contract processing is marked as such; further information is provided voluntarily. We process your data for order processing; in particular, we will forward payment data to your chosen payment service provider or our main bank. When you make your booking or a booking request, the booking information is also transferred to external operators of internet booking engines (e.g. TourOnline AG, Borsigstraße 26, 73249, Wernau; “DIRS 21”) for purposes of contract performance or preparation. The provision of your data is necessary for the conclusion of the contract. If your data is not provided the conclusion of the contract is impossible. The legal basis for the processing is Art. 6(1) Sentence 1(b) GDPR. To prevent unauthorised third parties from accessing your personal data, the order process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account in which we store your data for future visits to the website. When you create a customer account, the data you enter is processed. Once you have successfully logged in, you are free to edit or delete all other data, including your customer account.

As soon as storage is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data. Due to mandatory commercial and tax regulations, we are obliged to keep your address, payment and order data for a period of ten years. After two years after termination of the contract, we will restrict the processing and reduce the processing to compliance with our existing legal obligations.

Processing of personal data under Section 30 of the Federal Act on Registration (BMG)
Under Section 30 of the German Federal Act on Registration (BMG), commercial accommodation, such as hotels in particular, are obliged to collect the following data from guests on the day of their arrival and to have the registration form signed by hand:
• date of arrival and planned departure,
• surname,
• given names,
• date of birth,
• nationalities,
• address,
• number of persons travelling together and their nationalities, in the cases of Section 29(2), second and third sentences, and,
• in the case of foreigners, serial number of the recognised and valid passport or passport substitute.
• If applicable, furtherdata for collecting tourist and resort taxes.

We are obliged to collect, process and pass on this data under the BMG, and the legal basis of this processing results from Art. 6(1) Sentence 1(c) GDPR. You are legally obliged to provide your data. If your data is not provided, the conclusion or execution of the contract is impossible.

We erase this data or restrict its processing as soon as this is permitted under the provisions of the BMG and if you have not given your consent (Art. 6(1) Sentence 1(a) GDPR) and there is no other legitimate interest on our part in continued processing.

Comment feature
You can leave posts on the website.
When you post, we process the following personal data:
• shared name/username,
• age,
• kind of trip.

You do not have to enter a real name and are free to use the feature pseudonymously.

Furthermore, the following data is processed at the time of posting:
• IP address,
• Date/time of post.

When your post is published, the email address you provided will not be published, only the name/pseudonym you shared. Your post will not be checked by us before publication. We reserve the right to remove posts at any time if they are found to be unlawful.
If necessary, we process your email address and your name/pseudonym in order to be able to determine whether the content shared in the post is genuine. Furthermore, we would like to be able to contact you if someone else objects to your post on the website, and to defend ourselves against complaints or claims that may be brought against us as a result of your post.

For this purpose, we also process your IP address. We delete the IP address after 1 week. We will process your email address as long as the post continues to exist on the website or we are involved with the post in the context of a legal dispute.

If you or we delete your post, we process the email address, the name provided and other voluntary information up to the expiry of the statutory limitation periods for the aforementioned reasons of prevention and defence, but restrict the processing of this data after 6 months.

We do not pass the data on to third parties, unless we are obliged to do so by law or by official or judicial order or transmission is necessary for the enforcement of our legitimate interests. The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR.

You can object to the processing of the information you provide.Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).You can delete your post yourself at any time. You are free to take measures in accordance with the ‘Your rights’ section, although if you do have any complaints we request that you first contact our company.

Application process
We are pleased that you are interested in us and that you wish to apply or have already applied for a position in our company. In the following, we would like to provide you with information about the processing of your personal data in connection with your application. We process the data necessary for the online application process (name, email address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or any other vacancies within our company) and to conduct the application process.

The legal basis for the processing of your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) as amended on 25 May 2018. It allows the processing of data required in connection with hiring decisions. Should the data be required for the assertion of legal rights after completion of the application process, data may be processed on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6(1)(f) GDPR. In such cases, our interest is in asserting or defending claims.
In the event of a rejection, candidate data will be deleted after six months. In the event that you have agreed to further storage of your personal data, we will add your data to our applicant pool. There the data will be deleted after two years. If you are offered a job in the context of the application process, the data from the applicant data system will be transferred to our HR information system.

We use a specialist software provider for the application process. It acts as a service provider for us and may also become aware of your personal data in the context of system maintenance and support. We have concluded what’s known as a data processing agreement with this provider, which ensures that data processing is carried out in a permissible manner.

Upon receipt of your application, your application data will be reviewed by the HR department. Suitable applications are then forwarded internally to the department heads for the respective vacancies. The next steps to be taken are then agreed upon. In principle, only those persons in the company have access to your data who need this for the regular conduct of our application process.

Email marketing

Advertising to existing customers
We reserve the right to process the email address provided by you when booking in accordance with the statutory provisions in order to send you the following content by email whilst or after processing the contract, unless you have already objected to this processing of your email address:

• other interesting offers from our portfolio,
• information about company events,
• technical information,
• sending our catalogue,
• questions about special requirements,
• overview of possible leisure offers,
• information on finding us by public transport.

The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. We perform this processing for customer care and to enhance our services. We delete your data when you cancel your newsletter subscription, but no later than two years after termination of the contract.

We would like to point out that you can object to receiving direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. Here you have a general right of objection without giving reasons (Art. 21(2) GDPR). To do this, click on the unsubscribe link in the newsletter or send us your objection to the contact data provided under ‘Responsible provider’.

Payment service providers (PSPs)

Transmission of personal data for credit card payments
In principle, your personal data is only passed on to the extent necessary for the execution of the contract. Specifically for payment processing, we transmit the payment data required for this to the bank commissioned with the payment or, if applicable, to the payment and invoicing service provider commissioned by us.

The processing is performed on the basis of Art. 6(1) Sentence 1(b) GDPR (processing for the performance of a contract). If your data is not provided, it may be impossible to conclude or execute the contract. The data required for payment processing is transmitted securely using SSL encryption and processed exclusively for payment processing. As soon as storage is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.

Transmission of personal data for purposes of enforcing rights/ascertaining an address/debt collection
In the event of non-payment, we reserve the right to pass on the data provided at the time of booking to a lawyer and/or to external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss, Germany) if we have a legitimate interest pursuant to Art. 6(1) Sentence 1(f) GDPR in order to ascertain an address and/or enforce our rights.

In addition, we may pass on your information if this is necessary to protect our rights, as well as the rights of our affiliates, our cooperation partners, our employees and/or users of our website. Under no circumstances will we sell or rent your data to third parties. Such a transmission of your data would be based on Art. 6(1) Sentence 1(f) GDPR.

As soon as storage is no longer necessary, we delete the data generated in this context or, if statutory retention obligations apply, restrict processing of the data.

You have the possibility to object to the processing of your data at any time. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In particular, you have a right of objection if processing is not necessary to fulfil a contract with you, which is described by us in the previous description of the functions.You cansend us your objection to the contact data provided under ‘Responsible provider’. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

Hosting
We use external hosting services for the provision of the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. This involves processing all data necessary for the operation and use of our website.

We use external hosting services to run this website. By using external hosting services, we aim to make the provision of our website efficient and secure. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR.

The recording of data for the provision and use of the website and the processing of data using external web hosting services is an absolute necessity for the operation of the website. You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).You cansend us your objection to the contact data provided under ‘Responsible provider’. In the event that your objection is justified, we will examine the situation and either stop or adjust the data processing or point out to you the compelling legitimate reasons on the basis of which we will continue processing.

Content Delivery Network
Cloudflare
Our website also uses the services of the CDN provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, United States), to allow the website to be retrieved more quickly. When you visit the website, you download a library from the CDN and store it in the cache. During this process, your IP address is transmitted to the provider in the US. Cloudflare has subjected itself to the EU-US Privacy Shield and has thus committed to complying with European data protection standards: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0&status=Active.

The integration of Cloudflare is performed for the purpose of the more effective and faster supply of our website. The legal basis of the data processing is Art. 6(1) Sentence 1(f) GDPR. By using Cloudflare, we are pursuing our legitimate interest in faster website retrieval and an improved presentation of our content. We have no knowledge of how long data is stored and have no way of influencing this. For further information about data protection, please refer to: https://www.cloudflare.com/de-de/privacypolicy/.

You may object to the data processing at any time. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing. You can send us your objection via the contact data mentioned in the section "Responsible provider".

Integration of third-party content
The website integrates third-party content such as videos, maps, RSS feeds and graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) perceive the IP addresses of users. This is because without the IP address they would not be able to send the content to the browser of the respective user. As such, the IP address is required to display this content.

We endeavour to only use content from third-party providers who process the IP address solely for delivering the content. We do however have no influence over whether the third-party providers process the IP addresses, e.g. for statistical purposes. If we are aware of such activity, we inform you of this in the following.

Some of the third parties may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plug-in NoScript (www.noscript.net) or disabling JavaScript in your browser. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). This may however result in functional restrictions on the website.

YouTube videos
Our website uses plug-ins from the video platform YouTube.de/YouTube.com, a service whose provider – represented by Google – is YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA; “YouTube”). The plug-ins allow us to embed visual content (“videos”) on this website that we have published on Youtube.de/Youtube.com.

The videos are all embedded in ‘extended privacy mode’, which means that no data about you as a user will be transferred to YouTube if you do not play the videos. Only when you play the videos is the following data transferred. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have retrieved the corresponding subpage of our website. In addition, the data mentioned under ‘Access data’ is submitted. This occurs regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button.

YouTube stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. YouTube, as part of Google, also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long YouTube stores data and have no way of influencing this. For more information about the purpose and scope of processing by YouTube, please refer to its privacy policy at https://www.google.de/intl/en/policies/privacy.

Google Maps
This website also uses the Google Maps service from Google to display maps or sections of maps, thus enabling you to conveniently use the map function on the website.

By visiting the website, Google receives the information that you have retrieved the corresponding subpage of our website. In addition,the data mentioned under ‘Access data’ is transferred to Google. This occurs regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your Google profile, you must log out before activating the button.

Google stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.

For more information about the purpose and scope of processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options to protect your privacy: http://www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. For more information about the Google Maps terms of use, please refer tohttps://www.google.com/intl/de_de/help/terms_maps.html.

You have the right to object to the processing, You cansend us your objection to the contact data provided under ‘Responsible provider’. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

Getty Images
Our website uses plug-ins from the image agency Getty Images, which offers pictures and other image material. The Getty Images components are provided by Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland (“Getty Images”).
Ggetty Images allows us to embed stock images using an embed code, e.g. text, video or image data provided by an external website. Your IP address is transferred to Getty Images for the technical implementation of the embed code. In addition, Getty Images processes information about our website, the type of browser used, the browser language, and the time and length of access. Getty Images may also record information about your use of our website (e.g. access to subpages and clicks on links) and other interactions attributable to you while visiting our website. Getty Images also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The certification of Getty Images can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TNchAAG&contact=true. For further information about the current privacy policy at Getty Images, please refer to www.gettyimages.de/enterprise/privacy-policy.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of how long Getty Images stores data and have no way of influencing this.

You have the right to object to the processing. You cansend us your objection to the contact data provided under ‘Responsible provider’. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). This is the case if processing is not necessary in particular to fulfil a contract with you. In such a case, processing of the request may not be continued. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing. You can disable or restrict the transfer of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use the full functionality of the website.

Services for statistical, analysis and marketing purposes
We use services from third parties for statistical, analysis and marketing purposes. This enables us to offer you a user-friendly, optimised experience when visiting the website. The third-party providers use cookies to control their services (see ‘Cookies’ above). Unless otherwise explained below, this does not involve the processing of personal data.

Some of the third-party providers offer users the option of directly objecting to the use of the respective feature, e.g. by placing an opt-out cookie.

If you activate such an opt-out cookie, the third-party provider will no longer process data about your usage behaviour in the future. It is also possible to merely object individually to a partial selection of external services. If you change the browser or device used or delete all cookies, you will be required to set the opt-out cookie again.
Furthermore, you can also object directly to the use of cookies via the opt-out platform of the organisation Bundesverband Digitale Wirtschaft e.V. (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). More information about usage-based advertising and opt-out options can also be viewed via the following link: http://www.youronlinechoices.com/de/.

In the following, we inform you about the services from external providers currently in use on our website, about the purpose and scope of the respective processing in each case, and about how you can object.

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that
end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the
utilized operating system and the user’s origin. This data is assigned to the respective end device of the user.
An assignment to a user-ID does not take place.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among
other things. Google Analytics uses various modeling approaches to augment the collected data sets and
uses machine learning technologies in data analysis.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the
user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by
Google is, as a rule transferred to a Google server in the United States, where it is stored.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.
Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the
browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data
Privacy Declaration at:
https://support.google.com/analytics/answer/6004245?hl=en.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent
provisions of the German data protection agencies to the fullest when using Google Analytics.

Usage-based online advertising

Google AdWords Conversion
We use the services of Google AdWords from Google to draw attention to our attractive offers with the help of advertising media (so-called Google AdWords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. Here we are pursuing the interest of showing you ads that are of interest to you in order to make our website more interesting for you and to achieve a fair calculation of advertising costs.

These advertising media are delivered by Google via so-called ad servers. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google AdWords stores a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marker showing that the user no longer wishes to be targeted).

These cookies allow Google to recognise your internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their device has not yet expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this site. Each AdWords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. We do not process any personal data ourselves in the aforementioned advertising measures. We only receive statistical analyses from Google. On the basis of these analyses, we can recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to what we know: By integrating AdWords Conversion, Google receives the information that you have retrieved the corresponding part of our website, or that you have clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address. Google processes the data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis of the processing of your data is Art. 6(1) Sentence 1(f) GDPR. We have no knowledge of how long Google stores data and have no way of influencing this.

For further information about privacy at Google, please refer to: http://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

You have the right to object to the processing of your data.Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).

There are various ways in which you can prevent your participation in this tracking procedure:

• by setting your browser software accordingly; in particular, disabling third-party cookies means that you will not receive any ads from third-party providers;

• by disabling cookies for conversion tracking, by setting your browser in such a way that it blocks cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads; please note that this setting will be erased if you erase your cookies;

• by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initiative via the link http://www.aboutads.info/choices; please note that this setting will be erased if you erase your cookies;

• by permanent deactivation in your browser Firefox, Internet Explorer or Google Chrome via the link http://www.google.com/settings/ads/plugin. We would like to point out that if you do so you may not be able to use the full functionality of this service.

Google DoubleClick

This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be
tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search
results or in banners associated with DoubleClick.
11 / 17
To be able to display interest adequate promotional content to users, DoubleClick must recognize the
respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to
the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g., device
fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the
respective user can be shown interest adequate advertising.
The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.
For further information on how to object to the advertisements displayed by Google, please see the
following links:
https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.

Social network plug-ins

Social network plug-ins are integrated into our website. These are provided by the following providers:

• Facebook (the provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework; hereinafter: “Facebook”);
• Google (see ‘Definitions’, https://www.google.com/policies/privacy/partners/?hl=en; Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);
• Instagram (the provider is Instagram, Inc., 1601 Willow Road, Menlo Park, California 94025, USA (data protection information at: https://help.instagram.com/155833707900388);Twitter (the provider is Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, data protection information at: https://twitter.com/en/privacy).

The plug-ins can be recognised on our website by the aforementioned lettering or, in some cases, by small stylised symbols.

We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding page of our website. In addition, the data mentioned under ‘Access data’ is transmitted.

In the case of Facebook and XING, according to the respective providers’ own information, IP addresses in Germany are anonymised immediately after their collection. By activating the plug-in, personal data about you is therefore transferred to the respective plug-in provider and processed there (in the USA in the case of US providers). Since the plug-in provider collects data via cookies in particular, we recommend that before clicking on the greyed-out box you delete all cookies using your browser’s security settings.

We have no influence on the data collected and processing procedures, and nor are we aware of the full scope of data processing, the purposes of processing, or the storage periods. We also have no information about the erasure of the data collected by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and processes this for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (including for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website.

The legal basis of the use of the plug-ins is Art. 6(1) Sentence 1(f) GDPR. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our website and make it more interesting for you as a user.

You have the right to object to the creation of these user profiles. Your right of objection exists if you have reasons arising from your particular situation, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR).There are also various ways in which you can prevent the creation of user profiles and thus make use of your right to object:

• by setting your browser software accordingly; in particular, disabling third-party cookies means that you will not receive any ads from third-party providers;
• by disabling interest-based ads from providers who are part of the “About Ads” self-regulation initiative via the link http://www.aboutads.info/choices; please note that this setting will be erased if you erase your cookies.

The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data about you collected by us will be directly assigned to your existing account with that plug-in provider. If you click or tap on the activated button and, for example, share a link to the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts.

After using a social network, we recommend that you log out regularly, especially however before activating the button, as in this way you can avoid being assigned to your profile with the respective plug-in provider.

7THINGS - my basic hotel

7THINGS - my favorite apartment

home