Privacy policy according to the DSGVO

The protection of your personal data has top priority for our company. This principle applies to our Internet offering as well as to our conventional services. Therefore, we would like to inform you at this point how we implement the data protection regulations in our Internet offer.

I. Name and address of the person responsible

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

WERKHAUS Design + Produktion GmbH
Industrial road 11+ 13
29389 Bad Bodenteich
Germany
Tel.: +49 (0) 5824-955-0
E-mail: info@werkhaus.de
Website: www.werkhaus.de

II. Name and address of the data protection officer

The data protection officer of the responsible party is:
Andreas Rösner
Bürowelt Köhn Handels GmbH & Co. KG
At the radio tower 4
29525 Uelzen
Germany
Phone: +49 (0) 581 90 36 15
E-mail: dsb@buerowelt-koehn.de

III. general information on data processing

1. Scope of the processing of personal data

As a matter of principle, we process personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected in this process:

Information about the browser type and the version used.
The operating system of the user
The user’s Internet service provider
The IP address of the user
Date and time of access
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after 28 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.

When calling up our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings.

 

Name	Besitzer	Dauer	Purpose and description
_cfuid	.raccoonstatic.com	1 Jahr	Used by the Cloudflare content network to identify trusted web traffic.
_cfuid	.roomraccoon.de	1 Jahre	Used by the Cloudflare content network to identify trusted web traffic.
PHPSESSID	Booking.roomraccoon.de	Session	Contains an anonymous user ID to associate multiple requests from a user to the same HTTP session.

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.

c) Purpose of data processing

The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.
In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.

d) Duration of storage, possibility of objection and elimination

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

VI. Contact

1. Contact us

On our website, we offer various ways to contact us. One of the possibilities is the contact form, other possibilities are the comment function and the catalog request. As soon as a user uses these possibilities, the data entered in the input mask will be transmitted to us.

In the following list, we would like to show you which data we store for which contact.

Contact form & voucher purchase:

• Your name
• Email address
• Subject
• Message to us

Comment:

• Your comment
• Email address
• Name
• Website -> optional

Request catalog:

• First and last name
• postal code
• Street and house number
• city

At the time of sending the message, the following data is also stored:

• The IP address of the user
• The date and time of registration for the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

2. The following data is collected for us during an online booking by RoomRaccoon:

• Your first and last name,
• your address and your email,
• your order transactions (date and content of the booking, value of goods),
• your credit card details,
• your additional remarks,
• your arrival time,
• your phone number.

This data will also be deleted again by us when your profile is deleted.

Legal basis of the data processing is Art. 6 para. 1 lit. b EU-DSGVO.

Excerpt from Article 6 (b) the processing is necessary for the performance of a contract to which the data subject is a party or in order to carry out pre-contractual measures at the request of the data subject;.

For the use of online booking it is not necessary of you to create an account. It is also possible to make a booking and send requests to us as a guest. In this case, you must provide your data again for each booking or request.

3. Legal basis for data processing

The legal basis for the processing of data in the presence of consent of the user is Art. 6 para 1 lit. a DSGVO.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

4. Purpose of data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

5. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

6. Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

VII. Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the controller:

1. Right to information (Article 15 DSGVO).

You may request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing is taking place, you may request information from the controller about the following:

• The purposes for which the personal data are processed;
• the categories of personal data which are processed;
• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
• the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
• the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
• the existence of a right of appeal to a supervisory authority;
• any available information on the origin of the data, if the personal data are not collected from the data subject;

the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. You have the right to request information about whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

2. Right to rectification (Article 16 DSGVO)

You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

3. Right to restriction of processing (Article 18 DSGVO).

You may request the restriction of the processing of personal data concerning you under the following conditions:

• if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
• the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims, or if you have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the controller’s legitimate grounds override your grounds.
• If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure (Article 17 DSGVO)

a) Obligation to erasure

You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:

• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
• The personal data concerning you has been processed unlawfully.
• The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

c) Exceptions

The right to erasure does not exist to the extent that the processing is necessary

• For the exercise of the right to freedom of expression and information;
• for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
• for the assertion, exercise or defense of legal claims.

5. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right against the controller to be informed about these recipients.

6. Right to data portability (Article 20 DSGVO).

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

• the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and
• the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection (Article 21 DSGVO)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

8. Right to revoke your declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9. Automated decision in individual cases, including profiling (Article 22 DSGVO).

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

• is necessary for the conclusion or performance of a contract between you and the controller,
• is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests, or
• is carried out with your explicit consent. However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases mentioned in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include, at a minimum, the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

VIII. Use of your data for direct marketing

 Subscription to our e-mail newsletter

If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.

Newsletter dispatch via Sendinblue

Our e-mail newsletters are sent via the technical service provider Sendinblue GmbH, Köpenicker Str. 126 , 10179 Berlin (“Sendinblue”), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f DSGVO and serves our legitimate interest in using an effective advertising, secure and user-friendly newsletter system. The data entered by you for the purpose of receiving newsletters (e.g. e-mail address) is stored on the servers of Sendinblue in Germany.

Sendinblue uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data, a direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded an order processing agreement with Sendinblue, in which we oblige Sendinblue to protect our customers’ data and not to pass it to any third parties.

You can read more information about the data protection of Sendinblue in the privacy policy of Sendinblue: https://www.sendinblue.com

Advertising by mail

On the basis of our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 Para. 1 lit. f DSGVO and to use it to send you interesting offers and information about our products by letter post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible.

Use of external links

This website contains links to other websites. This data protection declaration does not extend to the websites of third parties. We have no influence on whether their operators comply with data protection regulations and therefore do not accept any responsibility or guarantee for the correctness, up-to-dateness and completeness of the information and data protection conditions provided there.

IX. Analysis tools, Google products, advertising

1. Use of Google Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.

If your browser does not support web fonts, a standard font will be used by your computer.

For more information on Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://www.google.com/policies/privacy/.

2. Use of Google Ajax API

We use Ajax on these pages. Google AJAX Search API is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This tool is used to optimize loading speeds. For this purpose, program libraries are called from Google servers and Google’s CDN (content delivery network) is used. If you have previously used jQuery on another page from the Google CDN, your browser will fall back on the cached copy. If this is not the case, this will require a download, whereby data from your browser will reach Google Inc. (“Google”). Your data will be transferred to the USA. You can find out more in the privacy policy of the provider https://policies.google.com/privacy?hl=de&gl=de.

3. Use of Cloudflare

A web service of the company CloudFlare Inc, 101 Townsend St, 94107 San Francisco (hereinafter: CloudFlare) is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare. The legal basis for the data processing is Art. 6 para.1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. CloudFlare has self-certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on the handling of transferred data, please refer to CloudFlare’s privacy policy: https://www.cloudflare.com/security-policy/?utm_referrer=https://www.google.de/ . You can prevent the collection as well as the processing of your data by CloudFlare by disabling the execution of script code in your browser or by installing a script blocker in your browser (this can be found, for example, at www.noscript.net or www.ghostery.com ).

4. Use of Google

Our website uses the services of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View (hereinafter: Google). This data is used by to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. The legal basis for the data processing is Art. 6 para.1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. Google has self-certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data is deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/ . You can prevent the collection as well as the processing of your data by Google by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this can be found, for example, at www.noscript.net or www.ghostery.com ).

5. Use of Google Maps

We integrate the maps of the service “Google Maps” of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The processed data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually executed in the context of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/.

6. Use of Gstatic

On our website, a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is reloaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website.
Google Ireland Limited has self-certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on the handling of transmitted data, please see Gstatic’s privacy policy: https://policies.google.com/privacy You can prevent the collection as well as the processing of your data by Gstatic by disabling the execution of script code in your browser or by installing a script blocker in your browser (this can be found, for example, at www.noscript.net or www.ghostery.com).

7. Use of Instagram

Within our online offer, functions and content of the service Instagram, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can make known their liking regarding the content, the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the call of the above-mentioned content and functions to the profiles of the users there. Privacy policy of Instagram: http://instagram.com/about/legal/privacy/.

8. Use of Roomraccoon

This website uses the software provider Roomraccoon to provide an online booking engine (https://roomraccoon.de/). The operator of the site is Roomraccoon B.V., Willemstraat 15 , Breda, 4811 AJ, The Netherlands. With your booking, the personal data you provide during the booking process will be used for the purpose of business processing.

9. Use of web fonts from Fast.Fonts.Net and Fonts.com respectively

This site uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the servers of fonts.com. This enables fonts.com to know that our website has been accessed via your IP address. The use of Fonts.com web fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

If your browser does not support web fonts, a standard font will be used by your computer.

10. Use of YouTube

We use the YouTube.com platform to post our own videos and make them publicly available. YouTube is the service of a third party not affiliated with us, namely YouTube LLC.

Some Internet pages of our offer contain links or connections to the YouTube offer. In general, we are not responsible for the content of linked websites. In the event that you follow a link to YouTube, however, we would like to point out that YouTube stores the data of its users (e.g. personal information, IP address) in accordance with its own data usage guidelines and uses it for business purposes.

We also directly embed videos stored on YouTube on some of our web pages. With this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos are only called up by clicking on them separately. This technique is also called “framing”. If you call up a (sub-)page of our website on which YouTube videos are embedded in this form, a connection is established to the YouTube servers and the content is displayed on the website by informing your browser.

The integration of YouTube content only takes place in “extended data protection mode”. YouTube itself provides this mode and thus ensures that YouTube does not initially save any cookies on your device. However, when the relevant pages are called up, the IP address and the other data mentioned in section 4 are transmitted and thus, in particular, information is provided as to which of our Internet pages you have visited. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) before accessing the page or are permanently logged in.

As soon as you start the playback of an embedded video by clicking on it, YouTube only stores cookies on your device through the extended privacy mode, which do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.

Address and link to the privacy policy of the third-party provider:

Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated,

11. Use of Pinterest

On our site, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc, 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you call up a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the visited websites that also contain Pinterest functions, type and settings of the browser, date and time of the request, your usage of Pinterest as well as cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, can be found in the Pinterest data protection information: https://about.pinterest.com/de/privacy-policy

Privacy policy of WERKHAUS Design + Produktions GmbH Facebook Fanpage.

1. What is it about?

WERKHAUS Design+Produktion GmbH operates a “Facebook Fanpage” to draw attention to its services and service offerings and to interact with its customers as well as visitors to the Fanpage (hereinafter referred to as “Users”). For this Facebook fan page, WERKHAUS Design+Produktion GmbH together with Facebook Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland, hereinafter “Facebook”) is the responsible party within the meaning of the General Data Protection Regulation (DSGVO).

In the following, WERKHAUS Design+Produktion GmbH informs you about the type and scope of the processing of personal data when using the Facebook fan page.

2. Who is the responsible party for the Facebook fan page?

In addition to Facebook, the responsible party within the meaning of the GDPR is:

WERKHAUS Design+Produktion GmbH.
Industriestrasse 11+ 13
29389 Bad Bodenteich
Germany
Tel.: +49 05824 955-0
E-Mail: info@werkhaus.de
Website: www.werkhaus.de

If you have any questions about this data protection declaration or about the protection of your data by WERKHAUS Design+Produktion GmbH, you can also contact the data protection officers of WERKHAUS Design+Produktion GmbH at any time:

Andreas Rösner,
Deputy Matthias Dörling
Wolkenhof GmbH
Schillerstr. 13b
29525 Uelzen
Germany
datenschutz@wolkenhof.com

3. How is your data processed when you visit the Facebook fan page?

When you visit the Facebook fan page of WERKHAUS Design+Produktion GmbH, Facebook collects and processes personal data from you – even if you are not registered with Facebook yourself. Part of the personal data that Facebook collects and processes on the occasion of the use of the Facebook fan page is made available to WERKHAUS Design+Produktion GmbH in aggregated form via the so-called “Insights” (user statistics). For this purpose, Facebook stores a cookie on the user’s terminal device. Cookies are small information units that are stored on your end device. This serves to be able to use this information again at a later time. The cookie used as part of the Fanpage contains a unique user code that is assigned to each user. The cookie remains active for a period of two years unless it is deleted.

For more information on the use of cookies by Facebook, please refer to the Facebook Cookie Policy: https://de-de.facebook.com/policies/cookies/. The user statistics created are transmitted to WERKHAUS Design+Produktion GmbH exclusively in anonymized form. WERKHAUS Design+Produktion GmbH has no access to the underlying data in each case.

4. For what purposes is the data processed?

Facebook uses the data collected in the course of visiting the Fanpage in particular to distribute individualized advertising via its network. Which personal data is processed by Facebook for which purposes can be found in the Facebook terms of use and guidelines: https://www.facebook.com/policies.

WERKHAUS Design+Produktion GmbH uses the information obtained to optimize its offering on Facebook, for example to better tailor content to the needs of customers and users. For example, WERKHAUS Design+Produktion GmbH receives information about which content and applications users particularly like in order to provide them with more relevant content and to develop functions that could be of greater interest to users.

Based on the information collected, Facebook also creates demographic and geographic evaluations and makes them available to WERKHAUS Design+Produktion GmbH. This information is used by WERKHAUS Design+Produktion GmbH to target interest-based advertisements without gaining direct knowledge of a visitor’s identity. If visitors use Facebook on multiple devices, the collection and analysis can also take place across devices if they are registered visitors who are logged into their own profiles.

5. Legal basis and legitimate interests

With the processing of personal data, WERKHAUS Design+Produktion GmbH pursues the interest of providing users with a contemporary range of information as well as interaction options on Facebook. The processing is carried out on the basis of a balancing of interests according to Art. 6 para. 1 sentence 1 lit. f DSGVO, which always also takes your interests into account.

6. Is personal data passed on to third parties?

WERKHAUS Design+Produktion GmbH has no influence on whether Facebook transfers personal data to third parties. In particular, it is possible that personal data will be processed outside the European Union by Facebook Inc. based in the USA. WERKHAUS Design+Produktion GmbH does not pass on any personal data to third parties.

7. Your rights and further information

As a data subject, you are entitled to the following rights, insofar as the legal requirements for this are met:

Right to information, Art. 15 DSGVO
Right to justification, Art. 16 DSGVO
Right to erasure, Art. 17 DSGVO
Right to restriction of processing, Art. 18 DSGVO
Right to data portability, Art. 20 DSGVO
Right to object, Art. 21 DSGVO

Your data subject rights can be asserted with Facebook Ireland. You may also assert these rights against us, and we will forward your request to Facebook Ireland.

The primary responsibility under the GDPR for the processing of Insights data lies with Facebook. Facebook Ireland provides the essential Page Insights supplements to you. Information about Facebook’s Page Insights and its data processing can be found at: https://de-de.facebook.com/legal/terms/page_controller_addendum.

Through Facebook’s advertising settings, you can influence the extent to which your user behavior is recorded when you visit the Facebook fan page (https://www.facebook.com/ads/preferences). Further options are offered by the general settings of Facebook (https://www.facebook.com/settings), as well as the form for the right to object (https://www.facebook.com/help/contact/1994830130782319).

We as the operator of the Facebook fan page do not make any decisions regarding the processing of Insights data and all other information resulting from Article 13 DSGVO, including legal basis, identity of the responsible person and storage period of cookies on your end devices.

If you are already a customer of WERKHAUS Design+Produktion GmbH, then your data will also be processed as part of your business relationship with WERKHAUS Design+Produktion GmbH. You can find information on this in the WERKHAUS Design+Produktion GmbH data protection declaration: https://www.werkhaus.de/datenschutz/

Privacy policy of WERKHAUS Design+Produktion GmbH Instagram Fanpage.

1. What is it about?

WERKHAUS Design+Produktion GmbH operates an “Instagram Fanpage” to draw attention to its services and service offerings and to interact with its customers as well as visitors to the Fanpage (hereinafter referred to as “Users”). For this Instagram fan page, WERKHAUS Design+Produktion GmbH together with the operator of the social network Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) is the controller within the meaning of Article 4 No. 7 of the General Data Protection Regulation (GDPR). In the following, WERKHAUS Design+Produktion GmbH informs you about the type and scope of the processing of personal data when using the Instagram fan page.

The terms of use of Instagram as well as the other conditions and guidelines listed there at the end are authoritative.

In addition to Instagram, the responsible party within the meaning of the DSGVO is:

WERKHAUS Design+Produktion GmbH.
Industriestrasse 11+ 13
29389 Bad Bodenteich
Germany
Tel.: +49 05824 955-0
E-mail: info@werkhaus.de
Website: www.werkhaus.de

If you have any questions about this data protection declaration or about the protection of your data by WERKHAUS Design+Produktion GmbH, you can also contact the data protection officers at any time:

Andreas Rösner,
Deputy Matthias Dörling
Wolkenhof GmbH
Schillerstr. 13b
29525 Uelzen
Germany
datenschutz@wolkenhof.com

3. Purposes of processing

Instagram/Facebook uses the data collected in the course of visiting the Fanpage in particular to distribute individualized advertising via its network. Which personal data is processed for which purposes by Instagram/Facebook can be found in the Instagram terms of use and guidelines: Instagram Terms of Use.

WERKHAUS Design+Produktion GmbH uses the information obtained to optimize its offer on Instagram, for example, to better tailor content to the needs of customers and users. For example, WERKHAUS Design+Produktion GmbH receives information about which content and applications users particularly like in order to provide them with more relevant content and to develop functions that could be of greater interest to users.

Based on the information collected, Instagram also creates demographic and geographic evaluations and makes them available to WERKHAUS Design+Produktion GmbH. This information is used by WERKHAUS Design+Produktion GmbH to target interest-based advertisements without gaining direct knowledge of a visitor’s identity. If visitors use Instagram on several end devices, the collection and analysis can also be carried out across devices if they are registered visitors who are each logged into their own profile.

3. Legal basis and legitimate interests

We operate this Instagram page in order to present ourselves to and communicate with Instagram users and other interested persons who visit our Instagram page. The processing of the users’ personal data is based on our legitimate interests, in an optimized company presentation (Art. 6 para. 1 lit. f DSGVO).

4. Disclosure of data

It is conceivable that some of the information collected may also be processed outside the European Union by Facebook Inc. based in the USA
We ourselves do not pass on any personal data.

5. Objection options

Instagram users can influence the extent to which their user behavior may be recorded when visiting our Instagram page under the settings for advertising preferences. Further options are offered by the Facebook and Instagram settings:

• under the Facebook Ad Preferences
• in the Instagram Privacy & Security section
• with the form for the right to object.

The processing of information by means of the cookie used by Facebook can be prevented by not allowing cookies from third-party providers or those from Facebook in your own browser settings.

6. Nature of joint responsibility

From the agreements with Facebook also on joint responsibility, it essentially follows that requests for information and the assertion of other data subject rights are sensibly asserted directly against Facebook. This is because, as the provider of the social network and the possibility of integrating Facebook pages there, Facebook alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. However, if our support is required, we can be contacted at any time.

7. Your rights and further information

As a data subject, you are entitled to the following rights, provided that the legal requirements for this are met:

• Right to information, Art. 15 DSGVO
• Right to justification, Art. 16 DSGVO
• Right to erasure, Art. 17 DSGVO
• Right to restriction of processing, Art. 18 DSGVO
• Right to data portability, Art. 20 DSGVO
• Right to object, Art. 21 DSGVO

Information on the handling of personal data by Facebook on Instagram can be found in their privacy policy at https://help.instagram.com/519522125107875.

Privacy policy for the Twitter account of WERKHAUS Design+Produktion GmbH.

1. Data processed by Twitter

WERKHAUS Design+Produktion GmbH uses the technical platform and services of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. for the short message service offered here. The data controller for individuals living outside the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

Information on what data is processed by Twitter and for what purposes can be found in Twitter’s privacy policy: https://twitter.com/de/privacy.

WERKHAUS Design+Produktion GmbH has no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties. Nor does it have any effective means of control in this respect.

By using Twitter, your personal data will be collected, transferred, stored, disclosed and used by Twitter Inc. and thereby transferred to the United States, Ireland and any other country in which Twitter Inc. does business, and stored and used there, regardless of your residence.

On the one hand, Twitter processes your voluntarily entered data such as name and user name, e-mail address, telephone number or the contacts of your address book when you upload or synchronize it.

On the other hand, Twitter also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages that you send directly to other users, and can determine your location using GPS data, wireless network information or your IP address in order to send you advertising or other content.

For analysis, Twitter Inc. may use analytics tools such as Twitter Analytics or Google Analytics. WERKHAUS Design+Produktion GmbH has no influence on the use of such tools by Twitter Inc. and has not been informed about such potential use. If tools of this type are used by Twitter Inc. for the account of WERKHAUS Design+Produktion GmbH, WERKHAUS Design+Produktion GmbH has neither commissioned nor approved this nor supported it in any other way. Nor will the data obtained from the analysis be made available to it. Only certain non-personal information about the tweet activity, such as the number of profile or link clicks by a particular tweet, can be viewed by WERKHAUS Design+Produktion GmbH via his account. Moreover, WERKHAUS Design+Produktion GmbH has no possibility to prevent or turn off the use of such tools on its Twitter account.

Finally, Twitter also receives information when you view content, for example, even if you have not created an account. This so-called “log data” may be the IP address, browser type, operating system, information about the website you previously visited and the pages you viewed, your location, your mobile provider, the terminal device you use (including device ID and application ID), the search terms you used and cookie information.

Via Twitter buttons or widgets embedded in websites and the use of cookies, it is possible for Twitter to record your visits to these websites and assign them to your Twitter profile. Based on this data, content or advertising can be offered tailored to you.

You have options to restrict the processing of your data in the general settings of your Twitter account and under the item “Privacy and security”. In addition, you can restrict Twitter’s access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used.

More information on these items is available on the following Twitter support pages:

https://support.twitter.com/articles/105576#

https://help.twitter.com/de/search?q=datenschutz

You can find out about the possibility of viewing your own data on Twitter here:

https://support.twitter.com/articles/20172711#.

Information about the inferences drawn by Twitter about you can be found here:

https://twitter.com/your_twitter_data

Information about the available personalization and privacy setting options can be found here (with further references):

https://twitter.com/personalization

Furthermore, you have the option to request information via the Twitter privacy form or archive requests:

https://support.twitter.com/forms/privacy

https://support.twitter.com/articles/20170320#

• Contact details:
  Responsible in this respect is WERKHAUS Design+Produktion GmbH, Industriestrasse 11+ 13 29389 Bad Bodenteich, Tel.: 05824 9550, e-mail: info@werkhaus.de
• Contact details of the external data protection officer:
  Andreas Rösner, deputy Matthias Dörling, Wolkenhof GmbH, Schillerstr. 13b, 29525 Uelzen, e-mail: datenschutz@wolkenhof.com
• Purpose and legal basis
  The processing is carried out for the purposes of public relations of WERKHAUS Design+Produktion GmbH, WERKHAUS Design+Produktion GmbH uses the information obtained to optimize its offer on Twitter, for example to better tailor content to the needs of customers and users. For example, WERKHAUS Design+Produktion GmbH receives information about which content and applications users particularly appreciate in order to provide them with more relevant content and to develop functions that could be of greater interest to users. By processing personal data, WERKHAUS Design+Produktion GmbH pursues the interest of providing users with a contemporary range of information and interaction options on Twitter. The processing is based on a balance of interests in accordance with Art. 6 (1) sentence 1 lit. f DSGVO, which always takes your interests into account.
• Recipient
  The recipient of the data is first of all Twitter, where it may be passed on to third parties for Twitter’s own purposes and under Twitter’s responsibility. Recipients of publications are also the public, i.e. potentially anyone.
• Categories of personal data
  Although WERKHAUS Design+Produktion GmbH itself does not collect any data via its Twitter account. However, the data you enter on Twitter, in particular your username and the content published under your account, are processed by us insofar as we retweet or reply to your tweets, if applicable, or also write tweets from us that refer to your account. The data freely published and disseminated by you on Twitter is thus included by WERKHAUS Design+Produktion GmbH in its offer and made available to its followers.
• Rights, documentation, evaluation
  If you have any questions about our information offering, you can contact us at info@werkhaus.de. Your rights to information, restriction of processing, objection, correction or deletion of data can be asserted with our external data protection officer (see above). You can find this data protection declaration here in the currently valid version. The corresponding link will be communicated to you via our Twitter account.

Your rights in detail:

As a data subject, you are entitled to the following rights, insofar as the legal requirements for this are met:

• Right to information, Art. 15 DSGVO
• Right to justification, Art. 16 DSGVO
• Right to erasure, Art. 17 DSGVO
• Right to restriction of processing, Art. 18 DSGVO
• Right to data portability, Art. 20 DSGVO
• Right to object, Art. 21 DSGVO

Conditions of Participation Sweepstakes

I. Organizer
The organizer of this sweepstakes is Werkhaus Design und Produktion GmbH.
Sweepstakes on the social media channels of WERKHAUS is not connected to Instagram or Facebook and is in no way sponsored, supported or organized by Insagram or Facebook. The recipient of the information you provide is not Instagram or Facebook, but Werkhaus GmbH.

II. Scope of application
These conditions of participation apply to all sweepstakes of Werkhaus on the social media channels of Facebook and Instagram, if necessary in addition to special conditions of participation.

III. Participation
1. Any adult, natural person may participate in their own name. Minors are entitled to participate, subject to relevant legal provisions, if their legal representative consents to their participation. Employees of Werkhaus GmbH, affiliated companies and possible cooperation partners as well as their relatives are excluded from participation.
2. Each person may participate only once.
3. If participation requires the sending of materials or files, the participants must be the sole owners and holders of all rights of use and exploitation. With the sending, Werkhaus GmbH is granted the necessary rights of use and exploitation of the material sent for the purposes communicated in the competition, unless the participant declares his objection in writing with the sending.

IV. Duration of the competition, participation period
1. Sweepstakes are limited in time. The start of participation and the closing date or deadline for entries will be announced together with the respective prize draw.
2. Participation is free of charge and in no way dependent on the purchase of goods or the use of services. The use of the game is at the user’s own risk.

V. Determination of the winners
1. Unless otherwise described in the competition, the prizes will be selected from all correct entries at our own discretion. The selection decision is binding. The legal process is excluded.

VI. notification of prizes and acceptance of prizes
1. All winners will be notified via private message. Werkhaus GmbH reserves the right to publicly announce the names of the winners via Instagram comment. The participants agree to this.
2. Each winner notified in this way must confirm acceptance of the prize by sending the address details within one week of the notification being sent.
3. If Werkhaus does not receive such a message within this period, the possibility of accepting the prize will lapse and another participant may be determined and notified as the winner.
4. The prizes mentioned in the competition text will be raffled. If a prize is no longer available for any reason, Werkhaus reserves the right to replace the prize with an alternative of equal or greater value.
5. The prize exists exclusively in the scope stated by Werkhaus in the prize draw post.
6. Winnings will be sent to the winners free of charge within two weeks after acceptance of the competition. If a prize cannot be delivered for reasons for which Werkhaus is not responsible, the claim to the prize shall be forfeited.
7. A cash payment of the prize value or discount value and an exchange of the prize are excluded. The prize is not transferable.

VIII. Premature termination, exclusion
1. Werkhaus GmbH reserves the right to cancel or terminate the competition if proper execution cannot be guaranteed for technical or legal reasons. In such a case, the participants shall not be entitled to any claims against Werkhaus GmbH.
2. Werkhaus GmbH reserves the right to exclude participants from the competition. This applies in the event of violations of the conditions of participation or if participants use manipulation or other dishonest means.
3. The user is entitled to revoke his or her declaration of intent to enter into a contract and participate in a competition within two weeks. The period begins at the earliest with the receipt of this instruction. To meet the deadline, it is sufficient to send the revocation in time. It must be made in writing without stating reasons and sent to:
Werkhaus Design+Produktion GmbH
Industriestraße 11+13
29389 Bad Bodenteich

IX. Data protection
In order for a competition to be carried out, Werkhaus GmbH must collect personal data of the participants, such as name, address and e-mail address. Personal data will be collected, stored, processed and used by Werkhaus and, if applicable, by participating cooperation partners only for the purpose of carrying out and processing the relevant competition. The data will be deleted within one month after the prize has been awarded, with the exception of comments and messages posted or sent in connection with the competition.
Upon request, Werkhaus will provide each participant free of charge with information about all personal data stored about him/her and will promptly destroy such data free of charge upon request. For this purpose, an informal message by e-mail to: info@werkhaus.de will suffice.

X. Severability clause
Should any provision of the Terms and Conditions of Participation be or become invalid, this shall not affect the validity of the remaining provisions. The invalid or missing provisions shall be replaced by the respective statutory provisions.

XI. Applicable law
The competition is subject exclusively to the laws of the Federal Republic of Germany.
Furthermore, reference is made to our data protection declaration.