Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the Legal Information of this website. .

You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

Your data is collected in two ways: firstly, by you providing it to us, for example, data you enter into a contact form. 

Secondly, data is automatically collected by our IT systems when you visit the website. This primarily involves technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter our website.

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible. .

Regarding the terms used, such as 'processing' or 'controller', we refer to the definitions in Article 4 of the German General Data Protection Regulation (DSGVO).

The responsible entity for data processing on this website is:

Heimreise GbR

Oelbergstraße 72

53639 Königswinter

info@heimreise.eu

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time for the future in accordance with Art. 7(3) DSGVO. An informal email notification to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

You can object to the future processing of your data at any time in accordance with Art. 21 DSGVO. The objection can be made in particular against processing for direct marketing purposes.

In the event of data protection violations, the data subject has the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: 
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

In accordance with Art. 20 DSGVO, you have the right to receive your data, which we process automatically based on your consent or in fulfillment of a contract, in a standard, machine-readable format either to yourself or to a third party. If you request the direct transfer of the data to another controller, this will be done only if it is technically feasible.

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Some of the pages on the internet use what are known as cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our service more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can configure your browser to notify you about the setting of cookies and to allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14

Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies

Cookies that are required for the execution of the electronic communication process or for providing certain functions you desire (e.g., shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your surfing behavior) are stored, they are treated separately in this privacy policy.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version

Operating system used

Referrer URL

Hostname of the accessing computer

Time of the server request

IP address

These data are not combined with other data sources.

The basis for data processing is Art. 6 Para. 1 lit. f DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.

For the comment function on this page, in addition to your comment, information about the time the comment was created, your email address, and, if you are not posting anonymously, the username you chose will be stored.

The comments and the associated data (e.g., IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g., offensive comments).

The storage of comments is based on your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke your consent at any time. An informal email notification to us is sufficient for this purpose. The legality of the data processing operations already carried out remains unaffected by the revocation.

You can register on our website to use additional functions on the site. We use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as in the scope of the offer or for technically necessary changes, we use the email address provided during registration to inform you in this way.

The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke any consent you have given at any time. An informal email to us is sufficient for this purpose. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

We collect, process, and use personal data only insofar as it is necessary for the establishment, content design, or change of the legal relationship. This is done on the basis of Art. 6 Para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Personal data on the use of our Internet pages (usage data) are collected, processed, and used only to the extent necessary to enable the user to utilize the service or to bill for it.

For the error-free operation and to ensure comfortable use of our websites, it is generally indispensable to use third-party services and services. To do this, we must grant these subcontractors access to the data necessary for the provision of these services. Transmission only occurs based on legal permission in accordance with Art. 6 GDPR (e.g., if you have given your consent, it is necessary for the performance of a contract, a legal obligation requires it, or based on our legitimate interests).

The commissioning of third parties for data processing is based on a so-called "data processing agreement" in accordance with Art. 28 DSGVO. The third parties commissioned in the context of the provision of these websites are listed in the following paragraphs.

If data is processed or transferred to a third country (i.e., outside the European Union or the European Economic Area) by us or one of our subcontractors, this is done on an appropriate legal basis in accordance with Art. 6 GDPR, e.g., to fulfill our (pre-)contractual obligations, based on your consent, due to a legal obligation, or on the basis of our legitimate interests. The processing also takes place on the basis of suitable guarantees in accordance with Art. 44 et seq. DSGVO, such as an adequacy decision by the EU Commission regarding the level of data protection in a country (including the EU-US Privacy Shield) or after concluding officially recognized special contracts with our subcontractors (so-called "standard contractual clauses").

To ensure the smooth operation of our websites and to optimize the user experience, we or our hosting provider process content data, usage data, meta, and communication data of prospects and visitors to these pages based on our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR.

Our online shop is operated using Shopify. This is a service provided by Shopify Inc. (150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada). The privacy policy can be found here: https://www.shopify.com/legal/privacy. Kanada weist laut Angemessenheitsbeschluss der EU-Kommission ein angemessenes Datenschutzniveau auf. Shopify maintains an adequate level of data protection. In addition, Shopify Inc. is certified under the Privacy Shield agreement.

We use third-party offers within our websites to integrate their content and services, such as videos or fonts. The website's fonts are integrated using Google Fonts. This is done based on our legitimate interest in optimizing and operating our online service in accordance with Art. 6 Para. 1 lit. f DSGVO. The prerequisite for the transmission of content to the user's browser is the transmission of the user's IP address. Therefore, the IP address is essential for the (correct) display of these contents.

This site uses Web Fonts provided by Google LLC (1600 Amphitheatre Pkwy, Mountain View, California 94043, USA) for the uniform display of fonts. When you call up a page, your browser loads the required Web Fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you are using must establish a connection to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO

If your browser does not support Web Fonts, a standard font from your computer will be used.

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

If your browser does not support Web Fonts, a standard font from your computer will be used. ​​

This site uses the Google Maps service via an API. The provider is Google LLC (1600 Amphitheatre Pkwy, Mountain View, California 94043, USA).

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a server of Google in the USA and stored there. The provider of this site has no influence on this data transfer.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/. Google is certified under the Privacy Shield agreement and thereby offers a guarantee to comply with European data protection standards.

We only transfer personal data to third parties when it is necessary for contract execution, for example, to companies entrusted with the delivery of goods or the credit institution tasked with payment processing. Further transmission of data does not occur, or only occurs if you have expressly consented to the transmission. Your data will not be transferred to third parties without explicit consent, for example, for advertising purposes.

The basis for data processing is Art. 6 Para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

After the conclusion of a fee-based contract, there is an obligation to provide us with your payment data (e.g., account number for direct debit authorization), which are required for payment processing.

Payment transactions using common means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. An encrypted connection is indicated by the browser's address line changing from "http://" to "https://" and by the lock symbol in your browser line.

With encrypted communication, your payment data that you transmit cannot be read by third parties.

The companies tasked with payment processing are:

PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxemburg)

The company entrusted with the delivery is:

DHL Express Germany GmbH (Heinrich-Brüning-Str. 5, 53113 Bonn)

Newsletterdaten

To subscribe to the newsletter offered on our website, we need your email address and your name (for personal address). Other data is not collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass it on to third parties.

The newsletter subscription uses a double opt-in procedure. After subscribing, you will receive an email with a confirmation link. Only after confirming the subscription through this link will you receive our next newsletter. This procedure ensures that no one can sign up with email addresses that do not belong to them. The newsletter subscriptions are logged by the newsletter provider to meet the legal requirements of proof.

The processing of the data entered into the newsletter subscription form is based solely on your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored for other purposes with us (e.g., email addresses for the members' area) remain unaffected by this.

With the help of our newsletter service provider, we can analyze our newsletter campaigns. When you open the newsletter, a file included in the email (so-called "web beacon") connects to the servers of our newsletter service provider – provided your email client opens the newsletter in HTML view and external content is loaded. This allows us to determine whether a newsletter message has been opened. Additionally, so-called tracking links can be used to track which links in the newsletter were clicked. Technical information is also collected (e.g., time of retrieval, IP address, browser type, and operating system). This information is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you wish to object to this analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.

The data processing is based on your consent (Art. 6 Para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter, and will be deleted from our servers as well as the servers of our newsletter service provider after you cancel the newsletter. Data stored for other purposes with us (e.g., email addresses for the member area) remain unaffected by this.

Email advertising without newsletter subscription and your right to object: If we receive your email address in connection with the sale of a good or service and you have not objected, we reserve the right to regularly send you offers for similar products from our range by email based on § 7 Abs. 3 UWG. This serves to protect our predominantly legitimate interests in promotional communication with our customers. You can object to this use of your email address at any time via a message to the contact option described below or via a link provided in the promotional email, without incurring any costs other than the transmission costs according to the basic tariffs.

The newsletter is sent by a service provider on our behalf, to whom we pass on your email address for this purpose.

Postal advertising and your right to object: Furthermore, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g., to send interesting offers and information about our products by mail. This serves to protect our predominantly legitimate interests in advertising communication with our customers according to Art. 6 Para. 1 S. 1 lit. f DSGVO.

Google Ads Remarketing: We advertise this website in Google search results and on third-party websites through Google Ads. For this purpose, when you visit our website, Google sets the so-called remarketing cookie, which automatically enables interest-based advertising using a pseudonymous CookieID based on the pages you visited. This serves to protect our predominantly legitimate interests in the optimal marketing of our website according to Art. 6 Para. 1 S. 1 lit. f DSGVO. After the purpose is served and Google Ads Remarketing is no longer used by us, the data collected in this context will be deleted.

Further data processing only takes place if you have agreed with Google that your web and app browsing history can be linked to your Google account and that information from your Google account can be used to personalize ads you see on the web. In this case, if you are logged into Google during your visit to our website, Google will use your data along with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data to form audiences.

Google Ads is a service provided by Google Ireland Limited, a company registered and operated under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Insofar as information is transferred to Google's servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. In addition, you can inform yourself about the setting of cookies and make settings for this at the Digital Advertising Alliance.

Our website uses plugins from the Google-operated site YouTube. The operator of the sites is YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA), a subsidiary of Google LLC (Amphitheatre Parkway, Mountain View, CA 94043, USA).

When you visit one of our pages equipped with a YouTube plugin, a connection is established to YouTube's servers. This informs the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of making our online offers appealing. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO

For more information on how user data is handled, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Our online presence on Facebook, Instagram:

Our presence on social networks and platforms serves to improve, activate communication with our customers and prospects. We provide information about our products and ongoing special promotions there. When visiting our online presences in social media, your data may be automatically collected and stored for market research and advertising purposes. From these data, so-called usage profiles are created using pseudonyms. These can be used to place advertisements inside and outside the platforms that presumably match your interests. For this purpose, cookies are usually used on your device. These cookies store the visitor behavior and the interests of the users. According to Art. 6 Para. 1 lit. f DSGVO, this serves to protect our predominantly legitimate interests in an optimized presentation of our offer and effective communication with customers and prospects. If you are asked by the respective social media platform operators for consent (agreement) to the data processing, e.g., with a checkbox, the legal basis of the data processing is Art. 6 Para. 1 lit. a DSGVO. Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has made an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here. For detailed information on the processing and use of data by the providers on their pages, a contact option and your related rights and settings options for protecting your privacy, in particular opt-out options, please refer to the providers' privacy policies linked below. If you still need help with this, you can contact us. Facebook: https://www.facebook.com/about/privacy/

Data processing is based on an agreement between joint controllers pursuant to Art. 26 DSGVO, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Instagram: https://help.instagram.com/519522125107875

Opt-out options:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875

Summary of your contact options and your rights:

As a data subject, you have the following rights:

According to Art. 15 DSGVO, the right to obtain information about your personal data processed by us to the extent specified therein;
According to Art. 16 DSGVO, the right to demand the immediate correction of incorrect or complete personal data stored by us;

According to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest or
- for the establishment, exercise or defense of legal claims;
is required;
According to Art. 18 GDPR, the right to request the restriction of processing of your personal data, insofar as
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose the erasure;
- we no longer need the data, but you require them for the establishment, exercise or defense of legal claims, or
- you have objected to processing pursuant to Art. 21 DSGVO;

According to Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller;
According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.

To the extent that we process personal data as explained above to protect our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If processing is carried out for other purposes, you only have the right to object if there are reasons that arise from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of serves legal claims.

This does not apply if the processing is carried out for direct marketing purposes. We will then no longer process your personal data for this purpose.