Privacy Policy
Personal data (hereinafter mostly referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4, point 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as "GDPR"), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we alone or jointly with others decide on the purposes and means of processing. In addition, we inform you below about third-party components we use for optimization purposes and to improve user experience, insofar as such third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the data controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the data controller
The responsible provider of this website in terms of data protection law is:
Ronny Kreuzberg
Carl-von-Ossietzky Straße 9
99423 Weimar
Phone: 017645340290
E-Mail: info@haitauchen.com
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to obtain confirmation as to whether data concerning them is being processed, to access the processed data, to receive further information about the data processing, and to receive copies of the data (see also Art. 15 GDPR);
- to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
- to the immediate deletion of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary according to Art. 17 (3) GDPR, to the restriction of processing pursuant to Art. 18 GDPR;
- to receive the data concerning them and provided by them, and to have these data transmitted to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
Furthermore, the provider is obligated to inform all recipients to whom data have been disclosed by the provider about any correction or deletion of data or restriction of processing carried out pursuant to Articles 16, 17 (1), and 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has the right to information about these recipients.
Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of their data if the data are processed by the provider pursuant to Art. 6 (1) lit. f) GDPR. In particular, an objection to the processing of data for the purpose of direct marketing is permitted.
III. Information on data processing
Your data processed during the use of our website will be deleted or blocked as soon as the purpose of storage ceases to exist, provided that no legal retention obligations oppose the deletion of the data and no different instructions regarding individual processing procedures are stated below.
Subscription to posts
If you publish posts on our websites, we also offer you the option to subscribe to any follow-up posts by third parties. To inform you about these follow-up posts via email, we process your email address.
The legal basis for this is Art. 6 (1) lit. a) GDPR. You may revoke your consent to this subscription at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, you only need to notify us of your revocation or click the unsubscribe link contained in the respective email.
Cookie Manager
To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie containing the settings information is stored on the user’s device so that the consent query does not need to be made on subsequent visits.
The cookie is required to obtain a legally compliant consent from the user.
The user can prevent or stop the installation of cookies by adjusting the settings of their browser.
Cookies
a) Session cookies
With our website, we use so-called cookies. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective, and secure, as it enables, for example, the display of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6(1)(b) GDPR, insofar as these cookies process data for the initiation or performance of a contract.
If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Where applicable, our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analytics, or enhancing the functionality of our website.
For details, in particular regarding the purposes and legal bases for the processing of such third-party cookies, please refer to the information below.
c) Option for removal
You can prevent or restrict the installation of cookies by configuring your internet browser settings accordingly. You can also delete already stored cookies at any time. The steps and measures required for this, however, depend on the specific internet browser you use. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. The processing of so-called Flash cookies, however, cannot be prevented via the browser settings. Instead, you need to change the settings of your Flash Player. The necessary steps and measures for this also depend on the specific Flash Player you use. If you have questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
d) Cookie Manager
Zur Verwaltung der eingesetzten Cookies und ähnlichen Technologien (Tracking-Pixel, Web-Beacons etc.) und diesbezüglicher Einwilligungen setzen wir das Consent Tool „Real Cookie Banner“ ein. Details zur Funktionsweise von „Real Cookie Banner“ findest du unter https://devowl.io/de/rcb/datenverarbeitung/.
The legal bases for the processing of personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide the personal data, we cannot manage your consents.
Contact Requests / Contact Options
If you contact us via contact form or email, the data you provide will be used to process your inquiry. Providing this data is necessary for processing and responding to your inquiry – without it, we cannot or can only partially respond to your request.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your inquiry has been fully answered and no legal retention obligations, such as those related to a possible subsequent contract processing, prevent the deletion.
Newsletter
If you sign up for our free newsletter, the data you provide, i.e., your email address as well as – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. During the further registration process, we will obtain your consent to receive the newsletter, describe its content specifically, and refer to this privacy policy. The data collected in this process is used exclusively for sending the newsletter – it will therefore not be passed on to third parties.
The legal basis for this is Art. 6(1)(a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future according to Art. 7(3) GDPR. To do so, you only need to inform us of your revocation or click the unsubscribe link contained in every newsletter.
User Contributions, Comments and Reviews
We offer you the opportunity to publish questions, answers, opinions, or reviews on our website, hereinafter referred to only as "contributions." If you take advantage of this offer, we process and publish your contribution, the date and time of submission, as well as any pseudonym you may use.
The legal basis for this is Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future according to Art. 7(3) GDPR. To do so, you only need to inform us of your revocation.
In addition, we also process your IP and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further actions if your contribution infringes the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Art. 6(1)(f) GDPR. Our legitimate interest lies in any necessary legal defense.
Server Data
For technical reasons, especially to ensure a secure and stable website, data is transmitted to us or our web hosting provider by your internet browser. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our site that you visit, the date and time of each access, as well as the IP address of the internet connection from which the use of our website takes place.
The data collected in this way is temporarily stored, but not together with other data from you.
This storage is based on the legal grounds of Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted no later than seven days unless further retention is required for evidentiary purposes. Otherwise, the data will be excluded from deletion in whole or in part until the final clarification of an incident.
We operate a company presence on the Facebook platform to promote our products and services as well as to communicate with interested parties or customers.
On this social media platform, we are jointly responsible together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Facebook can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and subsequently described processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, as well as the sale and promotion of our products and services.
The legal basis can also be the user’s consent according to Art. 6(1)(a) GDPR given to the platform operator. The user may revoke this consent at any time for the future by notifying the platform operator according to Art. 7(3) GDPR.
When accessing our online presence on the Facebook platform, data of the user (e.g., personal information, IP address, etc.) is processed by Meta Platforms Ireland Limited as the operator of the platform in the EU.
These user data are used for statistical information about the usage of our company presence on Facebook. Meta Platforms Ireland Limited uses these data for market research and advertising purposes as well as for creating user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, advertise to users according to their interests both on and off Facebook. If the user is logged into their Facebook account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.
In the event of user contact via Facebook, the personal data entered by the user on that occasion will be used to process the request. The user’s data will be deleted by us once the user’s request has been finally answered and no legal retention obligations, such as those related to subsequent contract processing, apply.
Meta Platforms Ireland Limited may also set cookies for the processing of the data.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. Processing of Flash cookies cannot be blocked via browser settings but only through the corresponding settings of the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.
Further details on the processing activities, their prevention, and the deletion of data processed by Facebook can be found in Facebook’s data policy:
https://www.facebook.com/privacy/explanation
It is not excluded that the processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
To promote our products and services as well as to communicate with prospects or customers, we operate a company presence on the Instagram platform.
On this social media platform, we are jointly responsible together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Instagram can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting and subsequently described processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, as well as the sale and promotion of our products and services.
The legal basis can also be the user’s consent according to Art. 6(1)(a) GDPR given to the platform operator. The user may revoke this consent at any time for the future by notifying the platform operator according to Art. 7(3) GDPR.
When accessing our online presence on the Instagram platform, data of the user (e.g., personal information, IP address, etc.) are processed by Meta Platforms Ireland Limited as the operator of the platform in the EU.
These user data serve statistical information about the usage of our company presence on Instagram. Meta Platforms Ireland Limited uses these data for market research and advertising purposes as well as for creating user profiles. Based on these profiles, Meta Platforms Ireland Limited can, for example, target users with interest-based advertising both inside and outside of Instagram. If the user is logged into their Instagram account at the time of access, Meta Platforms Ireland Limited can also link the data to the respective user account.
In the event of user contact via Instagram, the personal data entered on that occasion will be used to process the inquiry. The user’s data will be deleted by us once the inquiry has been fully answered and no legal retention obligations, such as those related to subsequent contract processing, apply.
Meta Platforms Ireland Limited may also set cookies for the processing of the data.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. Processing of Flash cookies cannot be blocked via browser settings but only through the corresponding settings of the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.
More details on the processing activities, their prevention, and the deletion of data processed by Instagram can be found in Instagram’s data policy:
https://help.instagram.com/519522125107875
It is not excluded that the processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
X
We maintain an online presence on X to present our company and services and to communicate with customers/interested parties. X is a service of Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. We hereby point out that there is a possibility that user data is processed outside the European Union, particularly in the USA. This may pose increased risks for users, as, for example, later access to user data could be made more difficult. We also have no access to these user data. Access is exclusively held by Twitter.
The privacy policy of X can be found at
YouTube
We maintain an online presence on YouTube to present our company and services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
We therefore point out that there is a possibility that user data is processed outside the European Union, in particular in the USA. This may entail increased risks for users, for example, as access to user data may be more difficult later on. We also have no access to this user data. The access is exclusively with YouTube.
You can find YouTube’s privacy policy at
https://policies.google.com/privacy
General Linking to Profiles on Third-Party Providers
The provider places a link on the website to the social networks listed below.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider’s legitimate interest lies in improving the quality of use of the website.
The integration of the plugins is done via a linked graphic. Only by clicking on the respective graphic is the user redirected to the service of the respective social network.
After the user is redirected, the respective network collects information about the user. This initially includes data such as IP address, date, time, and the visited page. If the user is logged into their account on the respective network at that time, the network operator may associate the collected information from that specific visit with the user's personal account. If the user interacts via a “share” button of the respective network, this information can be stored in the user's personal account and possibly published. To prevent the collected information from being immediately linked to their user account, the user must log out before clicking the graphic. Additionally, it is possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy https://help.instagram.com/519522125107875
X
Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Privacy Policy: https://x.com/de/privacy
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy policy: https://policies.google.com/privacy
Google Analytics
We use Google Analytics on our website, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google."
Google Analytics helps us analyze the use of the website and measure the effectiveness of our marketing campaigns. The legal basis is Art. 6(1)(a) GDPR. Users can withdraw their consent to the use of Google Analytics at any time for the future via the "Cookie Settings" on our website, in accordance with Art. 7(3) GDPR.
Information such as time, location, and frequency of website visits as well as interactions with the website (e.g. click paths, viewed/clicked ads, link clicks), including the user's IP address, are transmitted to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also collects “demographic characteristics” and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done through the automated analysis of advertising and third-party information.
If the user has enabled personalized ads in their Google account and consents to Google Analytics, Google can analyze usage behavior across devices — that is, for all devices linked to the user's Google account. Google creates models for cross-device conversions; we only receive anonymous statistics in this context, not any personal data.
If the user wishes to disable this cross-device analysis, they can turn off the "Personalized advertising" feature in their Google account settings at the following link:
https://support.google.com/ads/answer/2662922?hl=de
We use Google Analytics with an anonymization function. This means that the user's IP address is shortened by Google within EU member states or in other countries that are party to the EEA Agreement.
Google uses the collected data to analyze the user's visit to the website and to compile reports for us about website activities. The data is also used to provide other services related to website and internet usage. Google may pass this information on to third parties if required by law or if third parties process this data on behalf of Google.
According to its own statements, Google will under no circumstances combine the user's IP address with other Google data. Further information and options for preventing the use of data are available from Google here:
https://www.google.com/intl/de/policies/privacy/partners
If the user does not agree to the data collection, they can also prevent it by installing the browser add-on to deactivate Google Analytics once.
Google Tag Manager
To integrate various functions on our website, we use Google Tag Manager. This product comes from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google."
The Google Tag Manager is used exclusively to embed certain content on our website and to manage these functions via an interface provided by Google.
When accessing the website, the corresponding functions are loaded from a Google server, which may also be located in the USA. The user's IP address is processed to provide these functions.
The functions used are listed in detail in our privacy policy. Consents not given by the user for certain functions are also respected when using the Google Tag Manager.
Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
The legal basis for use is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Google-Maps
On our website, we use Google Maps to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as "Google."
If you access the Google Maps component embedded in our website, Google stores a cookie on your device via your internet browser. To display our location and create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA.
In the event of your consent to this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through the connection established to Google in this way, Google can determine from which website your request was sent and to which IP address the directions are to be delivered.
If you do not agree with this processing, you have the option to prevent the installation of cookies through the appropriate settings in your internet browser. Details can be found above under the section "Cookies."
In addition, the use of Google Maps as well as the information obtained via Google Maps is subject to the Google Terms of Service and the Google Maps Terms of Service.
Furthermore, Google offers at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
Google AdSense
We use Google AdSense on our website to integrate advertisements. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
Google AdSense stores cookies and so-called web beacons on your device via your internet browser. This allows Google to analyze your use of our online presence. The information collected, including your IP address and the types of ads displayed to you, is transmitted to Google in the USA and stored there. Google may also pass this information on to contractual partners. However, Google states that your IP address will not be merged with other data about you.
If you have given your consent to this processing, the legal basis is Art. 6 (1) lit. a GDPR. The legal basis may also be Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the analysis, optimization, and economical operation of our online presence.
If you do not agree with this processing, you have the option to prevent the installation of cookies through the appropriate settings in your internet browser. Details can be found above under the section "Cookies."
In addition, Google provides information at
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
further information, in particular regarding the options for preventing data usage.