Privacy policy

This privacy policy explains how we handle your personal data. The applicable data protection law, in particular the General Data Protection Regulation (GDPR), shall apply. With the exception of the service providers and third-party suppliers that we name in this data protection declaration, we do not pass on any data to third parties. If you have any questions, please do not hesitate to contact us.

Content

Person responsible
General Information
Website hosting
Cookies, tracking pixels and mobile identifiers
Contact us
Affiliate Links
Newsletter
Site Comments
Other third party services
Rights of data subjects

Person responsible

The person responsible for data processing is

Aqua Guide
4211 Alberndorf in der Riedmark

General information

Provision of data

For a use of our website is usually neither legally nor contractually required to provide personal data. If the provision of data is necessary for the conclusion of a contract or if the user is obliged to provide personal data, we will inform you of this circumstance and the consequences of not providing the data in this data protection declaration.

Data transfer to third countries

We may use service providers and third parties located in countries outside the European Union and the European Economic Area. The transfer of personal data to such third countries is based on an adequacy decision of the European Commission (Article 45 GDPR) or we have provided appropriate safeguards to ensure data protection (Article 46 GDPR). Insofar as an adequacy decision of the European Commission exists for the transfer of data to a third country, we point this out in this privacy policy. In all other respects, users may obtain a copy of the appropriate safeguards, if not already included in the privacy statements of the service providers or third parties, from us.

Automated decision making

If we use automated decision-making including profiling, we will inform you in this privacy statement about this circumstance, about the logic involved and the scope and intended effects of such processing. Otherwise, automated decision-making does not take place.

Processing for other purposes

As a matter of principle, data are only processed for the purposes for which they were collected. If, exceptionally, they are to be further processed for other purposes, we will inform you about these other purposes prior to such further processing and provide all other relevant information (Article 13 (3) GDPR).

Website hosting

Each time our website is called up, the user’s browser transmits various data. For the duration of the visit to the website, the following data are processed and stored in log files even beyond an end of the connection:

Browser type and version used
Operating system
Pages and files accessed
Amount of data transferred
Date and time of the retrieval
Provider of the user
IP address in anonymized form
Referrer URL

The processing of this data is necessary in order to be able to deliver the website to the user and to optimize it for the user’s terminal device. The storage in log files serves to improve the security of our website (e.g. protection against DDOS attacks). IP addresses are anonymized before being stored in log files.

The legal basis for the processing is Art. 6 para. 1 UAbs. 1 letter f) GDPR. Our legitimate interest is to provide the website and improve website security. Log files are automatically deleted after 30 days.

The design and operation of our website is carried out by the provider Aut O’Mattic A8C Ireland Ltd, Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland.

Cookies, tracking pixels and mobile identifiers

On our website, we use technologies to recognize the end device used. These may be cookies, tracking pixels and/or mobile identifiers.

The recognition of an end device can basically take place for different purposes. It may be necessary to provide functions of our website, for example to provide a shopping cart. In addition, the aforementioned technologies may be used to track the behavior of users on the site, for example for advertising purposes. Which technologies we use in detail and for which purposes, we describe separately in this privacy policy.

For a better understanding, we explain below in general how cookies, tracking pixels and mobile identifiers work:

Cookies are small text files that contain certain information and are stored on the user’s terminal device. In most cases, this is an identification number that is assigned to an end device (cookie ID).
A tracking pixel is a transparent graphic file that is embedded on a page and enables log file analysis.
A mobile identifier is a unique number (mobile ID) that is stored on a mobile device and can be read by a website.

Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Art. 6 (1) UAbs. 1 lit. f) GDPR. Our legitimate interest is to provide the functions of our website.

We use cookies that are not required for the operation of our website in order to make our offer more user-friendly or to be able to track the use of our website. The legal basis here depends on whether the consent of the user must be obtained or we can invoke a legitimate interest. The user can revoke a granted consent at any time by, among other things, the settings in his browser.

The user can prevent and object to the processing of data using cookies by making the appropriate settings in his browser. In case of objection, not all functions of our website may be available. We provide separate information on other options for objecting to the processing of personal data using cookies in this data protection declaration. Where applicable, we provide links with which an objection can be declared. These are labeled “Opt-Out”.

Real Cookie Banner

This website uses the cookie consent technology “Real Cookie Banner” to obtain your consent to the storage of certain cookies or the use of certain technologies on your terminal device and to log this in accordance with data protection regulations. The provider of this technology is devowl.io GmbH, Tannet 12, 94539 Grafling, website:
https://devowl.io/de/wordpress-real-cookie-banner/ (hereinafter referred to as “Real Cookie Banner”).

When you enter my website, the following personal data is transmitted to Real Cookie Banner:

(1) Your consent or revocation of your consent.
(2) your IP address
(3) Information about your browser
(4) Information about your device
(5) When you visit this website

Furthermore, Real Cookie Banner stores a cookie in your browser in order to be able to assign or revoke consents given to you. The data collected in this way will be stored until you request us to delete it, until the Real Cookie Banner cookie deletes itself, or until the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Real Cookie Banner is used to obtain the legally required consent for the use of certain technologies. Its legal basis is Art. 6 para. 1 lit. c GDPR.

Contacting

In the event of contact being made, we process the user’s details, date and time for the purpose of processing the inquiry, including any queries.

The legal basis for the data processing is Art. 6 para. 1 UAbs. 1 lit. f) GDPR. Our legitimate interest is to respond to the requests of our users. Additional legal basis is Art. 6 para. 1 UAbs. 1 letter b) GDPR, if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.

The data will be deleted as soon as the request, including any queries, has been answered. We check at regular intervals, but at least every two years, whether any data accrued in connection with contacts is to be deleted.

Affiliate links

We participate in affiliate programs. This means that we set links to partner companies. If a user clicks on such an affiliate link, we may receive a commission. In this case, it is necessary to attribute the user’s activities on the pages of the affiliate company to our offer. This is done through the link or in other ways, for example through cookies. The accruing data is processed exclusively for this purpose.

Insofar as we obtain the consent of the user, the legal basis for the processing is Art. 6 (1) UAbs. 1 a) GDPR. Otherwise, the legal basis is Art. 6 (1) (1) (f) GDPR. Our legitimate interest is the financing of our offer.

The processed data will be deleted as soon as they are no longer necessary to settle the commission.

Newsletter

Users have the option to register for newsletters on our site. In doing so, we process the data entered during registration in order to be able to send a confirmation email to the user’s email address. After confirmation, we process the data in order to be able to send newsletters. For the purpose of personalization, we may also process the user’s name if the user has provided it.

With the registration, the date and time as well as the IP address of the user are stored in order to be able to prove a registration. We continue to process this data after deregistration for verification purposes and delete it after three years at the end of the year.

The legal basis for the processing is the consent of the user in accordance with Art. 6 (1) UAbs. 1 a) DSGVO. Otherwise, the processing is carried out in accordance with Art. 6 para. 1 UAbs. 1 letter f) DSGVO. Legitimate interests on our part are the dispatch of newsletters, personalized addressing of the user and proof that the user has subscribed to the newsletter.

MailPoet

We use MailPoet for our newsletter. Provider: Aut O’Mattic A8C Ireland Ltd, Grand Canal Dock, 25 Herbert PI, Dublin, D02 AY86, Ireland.

We use MailPoet to create forms, organize and analyze the sending of newsletters. The company uses cookies, tracking pixels, mobile identifiers and similar technologies to track the user’s interactions with our website. The data provided by you for the purpose of receiving the newsletter is stored on our servers. However, they are sent via MailPoet’s server, so MailPoet will process your data.

Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Article 6 (1) UAbs. 1 a) DSGVO.

Comments

On our website, we give users the opportunity to leave their own comments. When a comment is transmitted to us, we process the user’s details. To protect against misuse of the comment function (e.g. through spam or criminal content), we also process the date, time and IP address of the user.

The legal basis for the processing is Art. 6 para. 1 UAbs. 1 letter f) GDPR. Our legitimate interest is to be able to offer the comment function and to protect ourselves against abuse.

Other third-party services

Google Analytics

To analyze the use of our website, we use Google Analytics. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to track user activity on the website, a cookie is set on the end device. We use Google Analytics with the anonymize IP extension. The user’s IP address is automatically shortened before it is transmitted to servers in the USA. Among other things, the approximate geographic location, terminal device, screen resolution, browser and pages visited, including the length of stay, are evaluated.

Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) UAbs. 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 UAbs. 1 letter f) GDPR. Our legitimate interest is the optimization of our website, the improvement of our offers and online marketing.

The data collected by Google Analytics is automatically deleted after 14 months.

Opt-Out

Google Adsense

We use Google Adsense. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

We use Google Adsense to display personalized advertisements. Google uses cookies and tracking pixels to analyze user behavior and select suitable advertising. Among other things, the views of our website and other websites that use Google Adsense are evaluated and assigned to a user ID. The data is not merged with other user data stored by Google.

Insofar as we obtain the consent of the user, the processing is based on the legal basis of Art. 6 (1) UAbs. 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 UAbs. 1 letter f) GDPR. Our legitimate interest is the delivery of interest-based advertising.

Users can object to the use of data by Google for personalized advertising at any time with the following opt-out.

Opt-Out

Google Hosted Libraries

To improve the speed of our website, we use Google Hosted Libraries. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to establish a connection with the Google server, it is technically necessary to transfer the user’s IP address to Google. Google Hosted Libraries only sets cookies that are necessary to ensure security and to prevent misuse.

The legal basis of the processing is Art. 6 para. 1 UAbs. 1 letter f) GDPR. Legitimate interest on our part is to shorten the loading times of our website.

Cloudflare

We use the content delivery network (CDN) Cloudflare CDN. Provider: Cloudflare Inc, 101 Townsend Street, San Francisco, California 94107.

Content is loaded from servers of the CDN. In order for a connection to be established, it is technically necessary to transfer the user’s IP address.

The legal basis for the processing is Art. 6 para. 1 UAbs. 1 lit. f) GDPR. Our legitimate interest is to improve the speed and availability of our website.

Shareaholic

Our website contains the Shareaholic plugin, which allows you to bookmark or share interesting website content. Cookies are also used when using Shareaholic. The data generated (e.g. time of use, browser language and IP address) is transmitted to Shareaholic Inc, Dogpatch Labs 1, Cambridge Center, Suite 600, Cambridge, MA 02142 and processed on servers in the USA and other countries.

For more information about Shareaholic Inc.’s data processing and privacy practices, please visit http://www.shareaholic.com/privacy/. In particular, this website contains information about the types of data processed and their purposes. The operator of this website does not process the related data. By using the Shareaholic button, you consent to the processing of data by Sahraholic Inc. to the extent indicated on the http://www.shareaholic.com/privacy/ website. You can object to the use of data at any time by setting an opt-out cookie at http://www.shareaholic.com/privacy/choices. You can also find more information on the above-mentioned website of Shareaholic Inc.

WordPress Emoji

To display emojis, we use WordPress Emoji. Provider: Aut O’Mattic A8C Ireland Ltd, Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland.

Emojis are downloaded as graphic files from the Automattic server. For this purpose, it is technically necessary to transmit the IP address of the user.

The legal basis for the processing is Art. 6 (1) UAbs. 1 lit. f) GDPR. Our legitimate interest is to improve the user experience.

Google Tag Manager

We use Google Tag Manager to manage our website tags. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The Tag Manager is a cookie-less domain that triggers tags from various providers, which in turn collect data. Google Tag Manager does not access this data. In order to trigger tags, it is technically necessary to transmit the user’s IP address to Google.

The Google Tag Manager is used on the legal basis of Art. 6 (1) UAbs. 1 lit. f) GDPR. Our legitimate interest is the simplified management of third-party services used by us.

Google reCAPTCHA

To increase the security and availability of our website, we use the service reCAPTCHA. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

With queries, we want to ensure that actions on our site are not triggered by bots. For this purpose, it is technically necessary to transfer the user’s IP address to Google.

The legal basis for the processing is Art. 6 para. 1 UAbs. 1 lit. f) GDPR. Our legitimate interest is to ensure website security and to protect against spam and abuse.

Google Fonts

On our website, we use Google Fonts. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Fonts are loaded from the Google server. In order to establish a connection to the server, it is technically necessary to transfer the user’s IP address.

The legal basis of the processing is Art. 6 para. 1 UAbs. 1 letter f) GDPR. Our legitimate interest is the reduction of loading times and a uniform presentation on different end devices.

Wordfence

We have integrated Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”).

Wordfence is used to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can match its databases with the accesses made to our website and block them if necessary.

The use of Wordfence is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.wordfence.com/help/general-data-protection-regulation/.

We have concluded a contract on order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Source: https://www.e-recht24.de

Polylang

On our website we use Polylang. Provider: WP SYNTEX 28, rue Jean Sébastien Bach, 38090 Villefontaine, France.

Polylang is used to make a website available in multiple languages. In doing so, this plugin sets cookies to save the selected language.

The legal basis of the processing is Art. 6 (1) UAbs. 1 lit. f) GDPR. Our legitimate interest is to improve the user experience.

Rights of data subjects

If personal data of the user is processed, he is a data subject in the sense of the GDPR. Data subjects are entitled to the following rights:

Right of access: The data subject has the right to request confirmation as to whether personal data concerning him or her are being processed. If personal data are processed, the data subject shall have the right to obtain, free of charge, information and a copy of the personal data that are the subject of the processing.

Right to rectification: The data subject has the right to request that inaccurate or incomplete personal data be corrected without delay.

Right to erasure: The data subject has the right to request, in accordance with the law, the erasure without delay of personal data concerning him or her.

Right to restriction of processing: The data subject has the right to request restriction of the processing of personal data concerning him or her in accordance with the law.

Right to data portability: The data subject has the right to obtain the personal data concerning him or her in a structured, commonly used and machine-readable format or to request its transfer to another controller.

Right to object: The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out on the basis of Article 6(1)(a)(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling where it is related to such direct marketing.

Right of withdrawal: The data subject has the right to withdraw his or her given consent at any time.

Right to lodge a complaint: The data subject has the right to lodge a complaint with a supervisory authority.

Status of the data protection declaration: January 17, 2023

This privacy policy was created using the Einfach Abmahnsicher generator in cooperation with PRIGGE Recht.