PRIVACY POLICY

Privacy policy and information in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to the data protection regulations.

Responsible body for data processing

Adelholzener Alpenquellen GmbH
St. Primus-Str. 1-5
83313 Siegsdorf
phone: 08662 62-0
fax: 08662 62-101
e-mail: info@adelholzener.de

Registered in the commercial register at Munich Local Court: HRB 104599

Company data protection officer:

Lawyer Dr. Modlinger
e-mail: datenschutz@adelholzener.de
phone: 08662 / 62-0.

Sources and data relating to the processing of personal data

We process personal data which we receive from you within the scope of your Internet or social media use or which you have transmitted to us via the contact form. Data is stored in server log files, which are collected and automatically stored by the provider and are primarily transmitted to us by your browser. These are:

• Referrer URL
• Hostname of the accessing computer
• Date and time of the server request
• Name of the requested file
• Page from which the file was requested
• Web browser and operating system used
• (Complete) IP address of the requesting computer
• Transferred amount of data

Furthermore, we may process other data comparable with the categories mentioned above.

We collect the listed data in order to guarantee a smooth connection establishment of the website and to enable a comfortable use of our website by the users. The log file also serves to evaluate system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 Para. 1 lit. f) DSGVO.

We currently also offer the following social media channels:

Facebook fan page

• Facebook fan page (https://www.facebook.com/activeo2)
• Instagram (https://www.instagram.com/adelholzener_alpenquellen/?hl=de and https://www.instagram.com/activeo2_de/?hl=de).

Within the scope of social media use, we can call up statistical usage data from the respective social media company. This may include information about page views and activities; views of individual articles, videos, services (e.g. route planners), etc.; comments, shared content, responses, usage rates: Men and women, origin related to country and city, language. The legal basis for retrieving data for social media use is Art. 6 para. 1 lit. f) DSGVO.

Purpose of processing and legal basis

We process personal data in accordance with the provisions of the European General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG):

The legal basis for the storage of data or log files is Art. 6 para. 1 lit. f) DSGVO.

If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties. We collect the data listed above in order to ensure a smooth connection to the website and to enable users to use our website conveniently. The log file also serves to evaluate system security and stability as well as administrative purposes. In addition, we store your data for reasons of technical security, in particular to prevent attempts to attack our web server.

Examples in this context:

• Examination and optimization of procedures for needs analysis and direct customer approach;
• Advertising or market and opinion research, e.g. through the use of cookies, provided that you have not objected to the use of your data;
• Assertion of legal claims and defence in legal disputes;
• Guarantee of IT security and IT operation;
• Measures for business management and further development of services and products.

In particular, the social media companies create so-called usage profiles by means of their usage behaviour and use them to place advertisements. Cookies are usually stored on your computer for this purpose.

Based on your consent, Art. 6 para. 1 lit. a) DSGVO:

If you have given us permission to process personal data for certain purposes (e.g. passing on data to third parties, evaluating data for marketing purposes), the legality of this processing is given on the basis of your consent. Your consent can be revoked at any time.

Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

If you have given the social media companies your consent to a specific data processing, the processing will take place on the legal basis of Art. 6 para. 1 lit. a) DSGVO.

Based on legal requirements, Art. 6 para. 1 lit. c) DSGVO or in the public interest, Art. 6 para. 1 lit. e) DSGVO:

In addition, we are subject to various legal obligations, i.e. legal requirements. As far as data are processed in this respect, this is done exclusively on the basis of these regulations.

Passing on the data

Within the company, those departments receive their data that need it to fulfil our contractual and legal obligations. Contract processors used by us (Art. 28 DSGVO) may also receive data for these purposes. These are companies in the categories IT services, telecommunications, consulting as well as sales and marketing.

With regard to the transfer of data to recipients outside the company, please note that we will only pass on your data if this is permitted or required by law, if you have consented to this or if we are authorised to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities) where there is a legal or official obligation.
• Other data recipients may be those for whom you have given us your consent for data transmission.

Duration of storage

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfil the respective purposes.

Transfer of data to third countries

Data will only be transferred to third countries (states outside the European Economic Area - EEA) if this is necessary for the execution of our social media services, is legally required or you have given us your consent. We will inform you separately about details, if legally required.

When you visit our social media services, we point out that data from you can be processed outside EU data protection. The companies involved have undertaken to comply with the data protection standards of the EU as a privacy shield of certified US providers. This applies to:

Facebook: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Instagram: http://instagram.com/about/legal/privacy/

Use of cookies

Our website uses cookies which are stored by the browser on your device and contain certain settings for the use of the website (e.g. the current session). Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your end device until you delete them or the storage period expires. These cookies enable us to recognize your browser on your next visit.

In some cases, cookies are used to simplify website processes by saving settings (e.g., to keep already selected options available). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b) DSGVO either to implement the contract or in accordance with Art. 6 Para. 1 lit. f) DSGVO to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies for specific cases or generally exclude them and activate automatic deletion of cookies when the browser is closed.

If cookies are deactivated, the functionality of this website may be restricted.

Use of ReCaptcha

We use the service reCAPTCHA of Google Inc. for the contact form on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The purpose is to distinguish whether the input is made by a human being or by automated and mechanical processing. Your input will be transmitted to Google and used by Google. The IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. This data will be processed by Google within the European Union and possibly also in the USA. For data transfers to the USA, the European Commission has issued an adequacy decision, the "Privacy Shield". Google participates in the "Privacy Shield" and has submitted to the requirements.

The processing is based on Art. 6 para. 1 lit. f DSGVO in the legitimate interest of protecting our website from automated spying, misuse and SPAM. Further information about Google reCAPTCHA as well as the corresponding data protection declaration can be found under:

https://www.google.com/recaptcha/intro/android.html

as well as https://www.google.com/privacy.

Contact form and contact by e-mail

If you send us enquiries via contact form or e-mail, your details from the enquiry form or your e-mail, including the contact data provided by you, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. An e-mail address is necessary for the contact indication, as well as your first name and surname. In no case will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 lit. f) DSGVO. Your data will be deleted after final processing of your request, unless there are any legal obligations to retain it.

Google Analytics

If you have given us your consent, we use Google Analytics on our homepage, a web analysis service of Google LLC ("Google"). The legal basis for processing the data is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO. A cookie is placed on your computer for the service. The stored usage data is transferred to Google on a server (usually in the USA) and stored there. Google is subject to the US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Google uses this information to evaluate the use of our online services and, in particular, to compile user statistics. Pseudonymised user profiles are regularly created in the process. Google Analytics is only used with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, a transmission of the full IP address to a Google server in the USA cannot be ruled out. Users may refuse to accept cookies by selecting the appropriate settings on their browser, or by refusing to accept them. You can also prevent the transmission of the data stored by the cookie to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

For more information, please see Google's privacy policy: https://policies.google.com/technologies/ads.

Social plugins

We use social plugins ("plugins") on the basis of our legitimate interests, i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 Para. 1 lit. f) DSGVO. When you visit our site, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click on Facebook while logged into your account, you can link the content of our pages to your Facebook profile. This allows us to associate your user profile with a visit to our site. If you are not a member of Facebook, there is still the possibility that Facebook can find out and store your IP address. According to Facebook, only an anonymous IP address is stored in Germany. If you do not want Facebook to collect data via this online service, you must log out of Facebook before using our online service and delete your cookies.

As the provider of this site, we have no knowledge of the content of the transmitted data or its usage by Facebook. Further information can be found in Facebook's privacy policy at:

https://de-de.facebook.com/policy.php.

Facebook offers a guarantee of compliance with European data protection law and is certified under the Privacy Shield Agreement.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Facebook fan page

The operation of a Facebook fan page constitutes a processing under joint responsibility in compliance with Art. 26 DSGVO. For this purpose, an agreement has been concluded with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). This agreement can be viewed at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

According to this agreement, we do not have any decisions or influence over the processing of the data by Facebook.

Facebook assumes responsibility for processing the so-called "Insights Data" and fulfilling the corresponding obligations under the DSGVO.

Instagram

Within our online offer, functions and contents of the Instagram service are integrated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos or text and buttons with which users can express their favor about the content, the authors of the content or subscribe to our contributions. If the users are members of the Instagram platform, Instagram can assign the call of the above contents and functions to the user profiles there.

For more information, please refer to Instagram's Privacy Policy: http://instagram.com/about/legal/privacy/.

Twitter

We use the Twitter Inc, 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA service on our website. If you use Twitter and in particular the "Re-Tweet" function, Twitter will link your Twitter account to the websites that you visit. This will be announced to other users on Twitter and your followers. This is also the way in which data is transmitted to Twitter. We are not informed by Twitter about the content of the transmitted data or the usage of data. You can inform yourself under the following link: http://twitter.com/privacy.

You can change your Twitter privacy settings in your Twitter account settings at http://twitter.com/account/settings.

YouTube

In the context of a justified interest pursuant to Art. 6 Para. 1 lit. f) DSGVO, namely the appealing design of our websites, we use YouTube for the integration of videos and integrate YouTube media (plugin) for the presentation of videos. YouTube is a service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If you call up our Internet presence through the website equipped with such a plugin, a connection to the YouTube servers will be established and the plugin will be displayed.

This will pass information to the YouTube server that you have visited our website. If you are logged into YouTube as a member, YouTube assigns this information to your personal user account. When using the plugin, e.g. clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment if you log out of your YouTube user account and other YouTube LLC and Google Inc. user accounts before using our website as well delete the corresponding company cookies. YouTube is a subsidiary of Google and is certified under the Privacy Shield Agreement. YouTube thereby offers a guarantee of compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Further information on data processing and note on data protection by YouTube (Google) can be found at: www.google.de/intl/de/policies/privacy/.

Raffle

On our website www.adelholzener.de we offer you the chance to take part in competitions organised by us. Legal basis for the processing of the data within the scope of the competition is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO. In principle, the prizes will only be sent to you by us. We use the data provided within the framework of participation in the competition exclusively for the purpose of processing the competition.

AddThis

Our websites contain AddThis plug-ins. The plug-ins give you the opportunity to interact with social networks and other users so that we can improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is your consent according to Art. 6 Para. 1 S. 1 lit. a) DSGVO. The service is operated by AddThis, LLC, 1595 Spring Hill Rd, Suite 300, Vienna, VA 22182, USA ("AddThis"). AddThis also provides tools for website operators to help analyse, improve or directly address the use of their website. AddThis also uses cookies and tracking pixels to record and analyze log files. If you are using an AddThis plugin, your Internet browser will establish a direct connection with AddThis's servers and, if applicable, the selected social network. The generated data (e.g. time of use or browser language) is transferred to AddThis and processed there. When you send content from our website to social networks, a link can be established between your visit to the website and your user profile on that social network.

If you do not wish to participate in this procedure, you can object to the collection and storage of data at any time by setting an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out.

Alternatively, you can set your browser so that it prevents the setting of a cookie.

Further information can be obtained from the provider AddThis at: www.addthis.com/privacy.

For more information on data processing and privacy by AddThis, please visit: http://www.addthis.com/privacy/privacy-policy.

ADITION technologies AG

On our homepage we collect and store data for marketing and optimization purposes with the technology ADITION adserving of ADITION technologies AG. The data collected can be used to create pseudonymised user profiles and cookies can be used for this purpose. However, the collected data is not used to personally identify the visitor to our website. There is also no consolidation of data about the bearer of the pseudonym. ADITION technologies AG does not store any personal data by setting cookies. Only technical information such as the browser used or the installed operating system is analysed. You can object to the collection and storage of data at any time with effect for the future. An opt-out function for this purpose is available on the company website: https://www.adition.com/datenschutz/.

Duration of storage of personal data

To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfil the respective purposes.

Your rights

In the following you will find information on the data subject rights which the applicable data protection law grants you with regard to the processing of your personal data:

• Right of information:
  The right, pursuant to Art. 15 DSGVO, to request information about the processing of your personal data by us.

• Right of rectification:
  The right, pursuant to Art. 16 DSGVO, to immediately request the correction of inaccurate or incomplete personal data stored by us.

• Right of deletion:
  The right, pursuant to Art. 17 DSGVO, to demand the deletion of your personal data stored by us, unless the processing of your personal data is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

• Right to limitation of processing:
  The right to demand the restriction of the processing of your personal data in accordance with Art. 18 DSGVO if the correctness of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing operation in accordance with Art. 21 DSGVO.

• Right to data transferability in accordance with Art. 20 DSGVO:
  You have the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person, as far as this is technically feasible.

• Right of appeal:
  You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state in which our head office is located or, if applicable, to refer to the supervisory authority of your usual place of residence or workplace.

• Right of withdrawal:
  Right to revoke granted consent pursuant to Art. 7 para. 3 DSGVO: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation;

We would like to point out that it is easiest for you to assert your rights in connection with your social media use against the social media company.

You can find further information on Facebook at: https://www.facebook.com/legal/terms/information_about_page_insights_data.

See Instagram for more information: https://help.instagram.com/155833707900388.

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you carried out pursuant to Art. 6(1)(e) of General Data Protection Regulation DSGVO (data processing in the public interest) and Art. 6(1)(f) DSGVO (data processing based on a balancing of interests); this also applies to profiling based on this provision in accordance with Art. 4(4) of General Data Protection Regulation.

If you file an objection, we will no longer process your personal data unless we can prove compelling worthy reasons for processing which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

The opposition can be made formless and should be addressed as far as possible to:

Adelholzener Alpenquellen GmbH
St. Primus Street 1-5
83313 Siegsdorf
Phone: 08662 / 62 - 0
Fax: 08662 / 62 - 399
E-mail address: info.marketing@adelholzener.de

We would like to point out that your data subjects' rights in connection with your use of social media are the easiest to assert against the social media company.

You can find further information on Facebook at: https://www.facebook.com/legal/terms/information_about_page_insights_data.

See Instagram for more information: https://help.instagram.com/155833707900388.

Obligation to provide data

When using the Internet or social media, you must only provide personal data that is required for use or which we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.

External links

As far as other websites are linked, we have neither influence nor control on the linked contents and the data protection regulations there. We recommend you to check the privacy statements of linked websites in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

Automated decision making in individual cases

A fully automated decision making according to Art. 22 DSGVO does not take place. Should we use these procedures in individual cases, we will inform you separately if this is required by law.

Data usage for profile formation (scoring)

We do not process your data with the aim of evaluating certain personal aspects (profiling). As part of data collection through tracking services, your data is used to evaluate your user behaviour and possibly to create movement profiles.

Other

At this point we would like to inform you about further possibilities for the protection of your rights, setting possibilities and for the protection of your privacy at social media companies. Information from Facebook: https://www.facebook.com/about/privacy/ as well as in the "Information on Page Insights Data": https://www.facebook.com/legal/terms/information_about_page_insights_data Opt-Out: https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com.

Contact

If you have any further questions about the collection, processing and use of your personal data, please send us an e-mail to info@adelholzener.de.

Further information on compliance with the General Data Protection Regulation can be found in our information sheets according to Art. 13, 14 and 21 GDPR.

Download Infosheet customers PDF

Download Infosheet business partners PDF

Download Infosheet employees and applicants PDF