Data protection

Personal data (hereinafter mostly referred to as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4(1) of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to enhance the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as the controller

The controller responsible for this website in terms of data protection law is:

Ronny Kreuzberg
Carl-von-Ossietzky Straße 9
99423 Weimar

Telephone: 017645340290
Email: info@haitauchen.com

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation of whether data concerning them is being processed, to information about the data processed, to further information about the data processing, and to copies of the data (see also Article 15 GDPR);
to rectification or completion of inaccurate or incomplete data (see also Article 16 GDPR);
to the immediate erasure of data concerning them (see also Article 17 GDPR), or, alternatively, if further processing is necessary under Article 17(3) GDPR, to restriction of processing in accordance with Article 18 GDPR;
to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Article 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in breach of data protection provisions (see also Article 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing that takes place on the basis of Articles 16, 17(1), 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right, under Article 21 GDPR, to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.

III. Information on data processing

Your data processed when using our website will be erased or blocked as soon as the purpose of storage no longer applies, the erasure of the data does not conflict with any statutory retention obligations, and no other information is provided below regarding individual processing procedures.

Subscription to posts

If you publish posts on our websites, we also offer you the option to subscribe to any follow-up posts by third parties. In order to inform you about these follow-up posts by email, we process your email address.

The legal basis for this is Article 6(1)(a) GDPR. You may revoke your consent to this subscription at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you simply need to inform us of your revocation or click the unsubscribe link contained in the respective email.

Cookie Manager

To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.

When the website is accessed, a cookie with the settings information is stored on the user’s device so that the consent query does not have to be repeated on a subsequent visit.

The cookie is necessary to obtain a legally compliant user consent.

The user can prevent or terminate the installation of cookies by adjusting their browser settings.

Cookies

a) Session cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective, and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Article 6(1)(b) GDPR, insofar as these cookies process data for contract initiation or contract execution.

If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6(1)(f) GDPR.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies

If necessary, our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis, or the functionalities of our website.

Please refer to the following information for details, in particular regarding the purposes and legal bases of processing such third-party cookies.

c) Removal option

You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete stored cookies at any time. However, the steps and measures required depend on your specific internet browser. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the setting of your Flash player. The steps and measures required for this also depend on your specific Flash player. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.

d) Cookie Manager

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal bases for the processing of personal data in this context are Article 6(1)(c) GDPR and Article 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

Contact requests / Contact option

If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary for processing and responding to your request – without it, we cannot answer your request or can only answer it to a limited extent.

The legal basis for this processing is Article 6(1)(b) GDPR.

Your data will be erased once your request has been fully answered and there are no legal retention obligations preventing erasure, such as in the case of any subsequent contract execution.

If you sign up for our free newsletter, the data you provide for this purpose, i.e., your email address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. During the further registration process, we will obtain your consent to send you the newsletter, describe the content specifically, and refer to this privacy policy. The data collected is used exclusively for sending the newsletter – it is therefore not passed on to third parties in particular.

The legal basis for this is Article 6(1)(a) GDPR.

You may revoke your consent to receive the newsletter at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you simply need to inform us of your revocation or click the unsubscribe link contained in each newsletter.

User posts, comments, and ratings

We offer you the opportunity to publish questions, answers, opinions, or ratings on our websites, hereinafter referred to as “posts”. If you make use of this offer, we will process and publish your post, the date and time of submission, and any pseudonym you may have used.

The legal basis for this is Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, you simply need to inform us of your revocation.

In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your post infringes the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Article 6(1)(f) GDPR. Our legitimate interest lies in any necessary legal defence.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our web space provider by your internet browser. These so-called server log files include, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which our website is accessed.

The data collected in this way is temporarily stored, but not together with other data about you.

This storage is based on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data is erased no later than seven days afterwards, unless further storage is required for evidentiary purposes. Otherwise, the data is exempt from erasure in whole or in part until the incident is finally resolved.

Facebook

To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook’s data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that takes place as a result and is set out below is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.

The legal basis may also be the user’s consent under Article 6(1)(a) GDPR to the platform operator. The user can revoke this consent for the future at any time in accordance with Article 7(3) GDPR by notifying the platform operator.

When our online presence is accessed on the Facebook platform, user data (e.g., personal information, IP address, etc.) is processed by Meta Platforms Ireland Limited as the platform operator in the EU.

This user data is used for statistical information about the use of our company presence on Facebook. Meta Platforms Ireland Limited uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, advertise users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.

If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the request. The user’s data will be erased by us once the user’s request has been finally answered and there are no legal retention obligations, such as in the case of any subsequent contract execution, preventing erasure.

Meta Platforms Ireland Limited may also set cookies to process the data.

If the user does not agree to this processing, it is possible to prevent the installation of cookies by adjusting the browser settings. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but by adjusting the Flash player settings. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be fully used.

Further information on the processing activities, their prevention, and the erasure of data processed by Facebook can be found in Facebook’s data policy:

https://www.facebook.com/privacy/explanation

It cannot be ruled out that processing by Meta Platforms Ireland Limited may also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Instagram

To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram’s data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, is available at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

When our online presence is accessed on the Instagram platform, user data (e.g., personal information, IP address, etc.) is processed by Meta Platforms Ireland Limited as the platform operator in the EU.

This user data is used for statistical information about the use of our company presence on Instagram. Meta Platforms Ireland Limited uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, advertise users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.

If the user contacts us via Instagram, the personal data entered by the user on this occasion will be used to process the request. The user’s data will be erased by us once the user’s request has been finally answered and there are no legal retention obligations, such as in the case of any subsequent contract execution, preventing erasure.

Meta Platforms Ireland Limited may also set cookies to process the data.

Further information on the processing activities, their prevention, and the erasure of data processed by Instagram can be found in Instagram’s data policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that processing by Meta Platforms Ireland Limited may also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

X

We maintain an online presence on X to present our company and our services and to communicate with customers/interested parties. X is a service provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This may result in increased risks for users, for example, in that subsequent access to user data may be made more difficult. We also have no access to this user data. Access is only available to Twitter.

You can find X’s privacy policy at

https://x.com/de/privacy

YouTube

We maintain an online presence on YouTube to present our company and our services and to communicate with customers/interested parties. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This may result in increased risks for users, for example, in that subsequent access to user data may be made more difficult. We also have no access to this user data. Access is only available to YouTube.

You can find YouTube’s privacy policy at

https://policies.google.com/privacy

General linking to third-party profiles

The provider includes links on the website to the social networks listed below.

The legal basis for this is Article 6(1)(f) GDPR. The provider’s legitimate interest lies in improving the quality of use of the website.

The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic is the user redirected to the service of the respective social network.

After the user is redirected, information about the user is collected by the respective network. This initially includes data such as IP address, date, time, and page visited. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information of the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button of the respective network, this information may be stored in the user’s personal user account and may be published. If the user wants to prevent the collected information from being directly assigned to their user account, they must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.

The following social networks are linked by the provider:

Facebook

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

X

Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Privacy policy: https://x.com/de/privacy

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”.

Google Analytics helps us analyse the use of the website and measure the effectiveness of our marketing campaigns. The legal basis for this is Article 6(1)(a) GDPR. The user can revoke their consent to the use of Google Analytics at any time with effect for the future in accordance with Article 7(3) GDPR via the “Cookie Settings” on our website.

Information such as time, location, and frequency of website visits, as well as interactions with the website (e.g., click paths, ads viewed/clicked, clicks on links), including the user’s IP address, is transmitted to a Google server in the USA and stored there for a maximum of 2 months.

Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision in accordance with Article 45 GDPR:

https://www.dataprivacyframework.gov/list

Google also records “demographic characteristics” and can create statistics that provide information about the age, gender, and interests of site visitors. This is done through the automated analysis of advertising and information from third parties.

If the user has enabled personalised ads in their Google account and consents to Google Analytics, Google can analyse usage behaviour across devices – i.e., in relation to all devices linked to the user’s Google account. Google creates models for cross-device conversions; only anonymous statistics are provided to us, no personal data.

If the user wishes to deactivate this cross-device analysis, they can disable the “Personalised advertising” function in the settings of their Google account under the following link:

https://support.google.com/ads/answer/2662922?hl=de

We use Google Analytics with an anonymisation function. This means that the user’s IP address is truncated by Google within the EU member states or in other contracting states of the EEA Agreement.

Google uses the collected data to evaluate the user’s website visit and compile reports on website activities for us. The data is also used to provide further services related to website and internet use. Google may disclose this information to third parties if required by law or if third parties process this data on behalf of Google.

According to its own statements, Google will not associate the user’s IP address with other Google data. Further information and options to prevent data use can be found here:

https://www.google.com/intl/de/policies/privacy/partners

If the user does not agree to the collection, they can also prevent it by installing the browser add-on to disable Google Analytics once.

Google Tag Manager

To integrate various functions on our website, we use Google Tag Manager. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”.

The Google Tag Manager is used solely to integrate certain content on our website and to manage these functions via an interface provided by Google.

When the website is accessed, the corresponding functions are loaded from a Google server, which may also be located in the USA. The user’s IP address is processed to provide the functions.

The functions used are listed exhaustively in our privacy policy. The consents not granted by the user for certain functions are also respected when using Google Tag Manager.

Google LLC is also part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision in accordance with Article 45 GDPR:

https://www.dataprivacyframework.gov/list

The legal basis for use is Article 6(1)(f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.

Google Maps

We use Google Maps on our website to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. Your user settings and data are processed to display our location and create directions. We cannot rule out that Google uses servers in the USA.

If you have given your consent for this processing, the legal basis is Article 6(1)(a) GDPR. The legal basis may also be Article 6(1)(f) GDPR. Our legitimate interest lies in optimising the functionality of our website.

Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be transmitted.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your internet browser. You can find details on this above under the heading “Cookies”.

In addition, the use of Google Maps and the information obtained via Google Maps is governed by the Google Terms of Use and the Terms and Conditions for Google Maps.

Furthermore, Google offers further information at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Google AdSense

We use Google AdSense on our website to integrate advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

Google AdSense stores cookies and so-called web beacons on your device via your internet browser. This enables Google to analyse your use of our website. In addition to your IP address and the advertising formats displayed to you, the information collected in this way is transmitted to Google in the USA and stored there. Furthermore, Google may pass this information on to contractual partners. However, Google states that your IP address would not be merged with other data about you.

If you have given your consent for this processing, the legal basis is Article 6(1)(a) GDPR. The legal basis may also be Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimisation, and economic operation of our website.

In addition, Google offers further information at

https://policies.google.com/privacy

https://adssettings.google.com/authenticated

in particular on the options for preventing the use of data.

Sample privacy policy from the law firm Weiß & Partner

Data protection

I. Information about us as the controller

II. Rights of users and data subjects

III. Information on data processing

Subscription to posts

Cookie Manager

Cookies

a) Session cookies

b) Third-party cookies

c) Removal option

d) Cookie Manager

Contact requests / Contact option

Newsletter

User posts, comments, and ratings

Server data

Facebook

Instagram

X

YouTube

General linking to third-party profiles

Facebook

Instagram

X

YouTube

Google Analytics

Google Tag Manager

Google Maps

Google AdSense

Shark Alert in Your Inbox