PRIVACY POLICY

 Your data are safe with us

Privacy is a matter of trust and your trust is important to us. We respect your privacy. The protection and legally compliant collection, processing and use of your personal data is therefore an important matter for us. To ensure that you feel safe when you visit our website, we strictly comply with the legal regulations when processing your personal data and would like to inform you about how we collect and use data.

Scope and purpose of data processing

1. Anonymous data collection

You can visit our website without providing us with any information about yourself. We only store so-called "server log files", access data without personal references, such as the name of your Internet provider, the Internet browser you use, the page you visit, the date and time you access the site or the name of the requested file. These data are only evaluated to improve our offer and we are not able to infer any personal references from it. 

This anonymous data is stored separately from your personal data and does not allow any conclusions to be deduced about a particular person. They are evaluated for statistical purposes in order to optimise our Internet presence and our offers. The legal basis for the temporary storage of the data and the "server log files" is described in Article 6, para.1 lit. F of the GDPR. The data are stored in log files to ensure the functionality of the website. The data will be deleted as soon as they are no longer required for achieving the purpose of their initial collection. In the event that the data are collected to help provide the website, this will be when the respective session is terminated.

2. Collection and processing of personal data

If you would like to use a service from our company through our website, it may be necessary to process certain personal data. If there is no legal basis for processing these personal data, we will obtain the consent of the person concerned. This will be clear at the appropriate points in the process. This may be necessary if you order from our voucher shop, request our newsletter or contact us via our contact form. The legal basis for processing in which we obtain consent from you for processing purposes is described in Article 6 para. I lit. a of the GDPR. If the processing of personal data is necessary for carrying out a contract or initiating a contract (e.g. for the delivery of goods or the provision of such services, or in case of enquiries about our products and services), the processing shall take place according to Article 6 para. I lit. b of the GDPR. 

The personal data you provide, such as name, company, address, email and telephone, are stored and used for the purpose of communicating directly with you in accordance with the General Data Protection Regulation (GDPR) and the "Federal Data Protection Act - new". Please note that in general, no confidential information should be sent via the contact form. The legal basis for processing the data transmitted in an email is described in Article 6, para. 1 lit. f of the GDPR. If the email is sent in order to conclude a contract, the additional legal basis for processing this step is described is Article 6, para. 1 lit. b of the GDPR.

2.1 Voucher shop

Personal data are collected when you voluntarily inform us of these in the context of your order for the purposes of the contract. We use the data you provide without your separate consent exclusively for fulfilling and processing your order. Once the contract has been completed and the full purchase price paid, your data will be blocked for further use and deleted in accordance with the procedures of the tax and commercial regulations, unless you explicitly agreed to the further use of your data. Your registration is required to maintain the availability of certain content and services on our website. 

The legal basis for processing the data with the consent of the user, is described in Article 6, para. 1 lit. a of the GDPR. If the registration is needed for fulfilling a contract that involves the user or for implementing pre-contractual measures, the additional legal basis for processing the data is described in Article 6, para. 1 lit. b of the GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose of their initial collection.

2.2 Data transfer

Your data will be passed on to the shipping company responsible for the delivery, as far as this is necessary for delivering the goods.

In order to process payments, we pass your payment details on to the credit institution responsible for the payment. These are not transferred to other third parties.

2.2.1 External payment service providers

We employ external payment service providers and use their platforms, along with the users of our website, to make payment transactions:

Paypal https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Giropay https://www.giropay.de/rechtliches/datenschutz-agb/

Visa https://www.visa.de/datenschutz

Mastercard https://www.mastercard.de/de-de/datenschutz.html

American Express https://www.americanexpress.com/de/content/privacy-policy-statement.html

In the context of fulfilling contracts, we use the payment service providers on the basis of Article 6 para. 1 lit. b of the GDPR. We also use external payment service providers on the basis of our legitimate interests in accordance with Article 6 para. 1 lit. f of the GDPR in order to offer our users effective and secure payment options. 

The data processed by the payment service providers includes stock data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as information relating to the contract, sum and recipient. The information is required to complete the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any information relating to the account or credit card, but only information confirming payment or non-payment. The payment service providers may send the data to credit bureaus in order to verify the identity and creditworthiness of the respective user. In this regard, please refer to the terms and conditions and data protection instructions of the payment service providers. 

Payment transactions are subject to the terms and conditions and the data protection notices of the respective payment service providers, which are available on the respective websites or transaction applications. Please refer to these for further information and assertion of rights to withdraw, disclosure and other affected rights.

3. Newsletter registration

After you have explicitly registered for the newsletter, you will receive regular interesting offers by email. Your email address will not be passed on to other companies. You can withdraw your consent to use your email address for advertising purposes at any time by clicking the "Unsubscribe" link at the end of the newsletter or by sending an email with "Unsubscribe newsletter" as the subject to marketing@carolus-thermen.de. 

When you subscribe to our newsletter, we will store your IP address, the date and time of your registration. This information is used as a safeguard on our part in the event that a third party abuses your email address and subscribes to our newsletter without your knowledge. Further data will not be collected on our part. The data collected in this way are used exclusively for the subscription to our newsletter. They are not transferred to third parties.

3.1 Newsletter mailing with CleverReach

The newsletter is sent out via the shipping service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. You can view the Privacy Policy of the shipping service provider here: https://www.cleverreach.com/de/datenschutz/. The shipping service provider is used based on our legitimate interests in accordance with Article 6 para 1 of the GDPR and an order processing contract pursuant to Article 28 para. 3 p. 1 of the GDPR.

The shipping service provider can use the data of the recipients in pseudonymous form, i.e. without assigning them to a user, in order to optimise or improve their own services, e.g. for technically optimising the mailing and presentation of the newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them directly or to pass the data on to third parties.

4. Use of Cookies

Our website uses, among other things, so-called "cookies", which help to make our website more user-friendly, effective and secure - for example, when it comes to speeding up navigation on our website. In addition, cookies enable us to measure the frequency of page views and general navigation. Cookies are small text files that are stored on your computer system. We would like to point out that some of these cookies are transferred from our server to your computer system and these are usually called "session cookies". "Session cookies" are characterised by the fact that they are automatically deleted from your hard drive after the end of the browser session. Other cookies remain on your computer system and allow us to identify your computer system when you next visit (so-called persistent cookies). Of course you can refuse to use cookies at any time, if your browser allows it. However, we would like to point out that this may limit the functionality of the features on our website. When you visit our website, you will be informed about the use of cookies for analysis purposes and requested to provide your consent for your personal data being processed in this context. In this context, there is also a reference to our Privacy Policy. The legal basis for the processing of personal data using cookies required for technical reasons is described in Article 6 para. 1, lit. f of the GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is, if you have given your consent, described in Article 6 para. 1 lit. a of the GDPR.

A detailed tabular overview of the Cookies used is found in the PDF „Download Privacy Policy“ in the imprint.

5. Use of plugins

5.1 Facebook Plugin

Our website uses plugins from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). This is done on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Article 6 para. 1 lit. f of the GDPR.). Facebook is certified under the Privacy Shield Agreement and provides a guarantee to comply with European data protection laws https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

If a user uses a function within this online offer that contains this kind of plugin, their device will establish a direct connection with Facebook’s servers. The content of the plugin is transmitted directly by Facebook to the user's device and is included in the online offer. Users can create user profiles from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and so we inform users according to our level of knowledge. 

By incorporating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged on to Facebook, Facebook can assign this visit to their Facebook account. When users interact with the plugins, for example press the Like button or leave a comment, the corresponding information is transmitted from their device directly to Facebook where it is stored. If a user is not a member of Facebook, there is still the possibility that Facebook will know and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany. 

The purpose and scope of the data collection, further processing and use of the data by Facebook as well as the relevant rights and settings for the protection of the privacy of the users, are explained in the Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.

If a user has an account on Facebook and does not want Facebook to collect information about them via this online offer and link it with their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offer. Further settings and objections regarding the use of data for advertising purposes can be made in the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings work irrespective of the platform, which means they will be applied on all devices, such as desktop computers or mobile devices.

5.2 Use of Google Analytics

Our website uses functions of the web analytics service: Google Analytics. The provider is the Google Inc. 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. This is also our legitimate interest in accordance with Article 6 para. 1 p. 1 lit. f of the GDPR. Google has submitted to the Privacy Shield Agreement between the European Union and the United States and become certified. As a result, Google agrees to comply with the standards and regulations of European data protection law. For more information, please refer to the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have enabled IP anonymisation on this website (anonymizeIp). As a result, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be sent to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services related to website activity and Internet usage.

The IP address submitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies being stored by changing a corresponding setting in your browser software; however, we would like to point out that in doing so, you may not be able to use all the functions of this website to their full extent.

You may furthermore prevent the data generated by the cookie and related to your use of the website (including your IP address) being transferred to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or within browsers on mobile devices, you can click the following link to set an opt-out cookie that will prevent Google Analytics from entering this website in the future (this opt-out cookie only works in this browser and only for this domain. To delete the cookies in your browser, you need to click this link again):