Privacy Policy

RESPONSIBLE PERSON

The responsible person within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the responsible person is:

Freizeit-Unternehmens-Gesellschaft mbH Künzell & Co. Bäderpark KG
Harbacher Weg 66, D-36093 Künzell
E-mail: kontakt@siebenwelten.de
Tel: 0661 397-0
Fax: 0661 397-151

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:

Freizeit-Unternehmens-Gesellschaft mbH Künzell & Co. Bäderpark KG

- To the data protection officer -
Harbacher Weg 66,
D-36093 Künzell

E-mail: datenschutz@siebenwelten.de

PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

Every time our website is accessed, our system automatically records data and information from the device accessing it (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;

(2) The operating system of the accessing device;

(3) Host name of the accessing computer;

(4) The IP address of the accessing device;

(5) Date and time of access;

(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing

The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable the website to be delivered. The personal data is also stored and processed to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate faults. For this purpose, it is necessary to log the technical data of the retrieving computer in order to be able to react as soon as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data is used to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after our website is accessed.

Objection and deletion options

You can object to processing at any time in accordance with Art. 21 GDPR and request deletion of data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them in the lower section of this data protection notice.

SPECIAL FUNCTIONS OF THE WEBSITE

Our site offers you various functions, when using which we collect, process and store personal data. Below we point out what happens to this data:

Order form

What personal data is collected and to what extent is it processed?

The data you enter in the form fields, such as address, surname, first name, etc., is processed by us to fulfill the purpose stated below.

Legal basis for the processing of personal data

Art. 6 Para. 1 lit. b GDPR (implementation of (pre)contractual measures)

Purpose of data processing

The purpose of data processing is to process your order so that we can process potential contractual relationships with you or carry out pre-contractual measures.

Duration of storage

The data will be deleted as soon as it is no longer required to process the order and there are no longer any legal retention obligations. This will usually be after 10 years (see Section 147 Para. 3 in conjunction with Para. 1 No. 1, 4 and 4a AO, Section 14b Para. 1 UStG).

Possibility of objection and deletion

You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Necessity of providing personal data

The information in the order form is neither contractually nor legally required, but is required for completion.

Automated credit check / scoring

If you would like to conclude a contract with us, we reserve the right to process your personal data exclusively in an automated manner in order to check your creditworthiness. We are also entitled to make such an automated decision in accordance with Art. 22 Para. 2 a GDPR. Whether the contract can be concluded or not depends on the result of the automated credit check. During a credit check, statistical probabilities of a payment default are calculated. The credit report can contain probability values ​​(score values) that are calculated on the basis of scientifically recognized mathematical and statistical procedures. A large number of characteristics, such as income, address data, occupation, marital status and previous payment behavior, are used to determine the customer's future risk of payment default. The result is expressed in the form of a payment value (so-called score). The information obtained in this way forms the basis of our decision on the establishment, implementation or termination of a contractual relationship. If you believe that you have been wrongly excluded from concluding a contract due to the credit check, you are welcome to explain your point of view to us by email. We will then review the automated decision in the specific individual case in accordance with Art. 22 Para. 3 GDPR. In order to be able to carry out the credit check, we may store and process your personal data in accordance with Art. 6 Para. 1 lit. b GDPR.

Due to the impending contract, we will transmit your data to the following provider(s) in the following cases:

Automatic identity and credit check when selecting Klarna payment methods

What personal data is collected and to what extent is it processed?

If you choose the payment method purchase on account with Klarna invoice purchase or the payment method installment purchase via Klarna installment purchase or Klarna Sofort, you will be asked during the ordering process to consent to the transmission of the data required for processing the payment and an identity and credit check to Klarna AB, Sveavägen 46, 11134 Stockholm, Sweden (hereinafter: Klarna). If you give your consent, Klarna will receive the following data from us: first and last name, street, house number, postcode, city, date of birth, telephone number and the data related to your order.

Legal basis for the processing of personal data

Art. 6 Para. 1 lit. b GDPR (implementation of (pre)contractual measures)

Purpose of data processing

For the purpose of identity and credit checks, Klarna transmits data to credit agencies (credit agencies) and receives information from them and, if applicable, credit information based on mathematical-statistical procedures, the calculation of which includes address data (so-called score values). This gives Klarna information about the statistical probability of a payment default, which forms the basis for the decision on the establishment, implementation or termination of the contractual relationship. However, the option to select one of the payment methods offered before concluding the contract is not dependent on such information.

The credit agencies are the following companies:

Bürgel Wirtschaftsinformationen GmbH & Co. KG, Postfach 5001 66, 22701 Hamburg

Creditreform Boniversum GmbH, Hellersbergstraße 11 41460 Neuss

Deltavista GmbH, Freisinger Landstr. 74, 80939 Munich

Arvato Infoscore Consumer Data GmbH / Infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden

SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden

Detailed information can be found in Klarna's privacy policy https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf and the terms of use https://klarna.com/de/AGB.

Duration of storage

We will store the relevant data for processing the payment for as long as it is necessary to carry out the transaction. If the data is subject to statutory retention periods, it will be deleted after the retention period has expired. The length of time Klarna stores the data can be found in Klarna's privacy policy: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

Opportunity to object and delete

You can object to processing at any time in accordance with Art. 21 GDPR and request deletion of the data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Necessity of providing personal data
The information in the order form is neither contractually nor legally required, but is necessary to conclude a contract. If you do not fill in the mandatory fields or do not fill them in completely, the order you have requested cannot be completed.

Booking request form

Automatic identity and credit check when selecting the "PayPal" payment method

What personal data is collected and to what extent is it processed?

If you have selected "PayPal" as your payment method, we will forward your personal customer data collected as part of the order to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. If you give your consent, the following data will be affected by the data transfer: first and last name, street, house number, postcode, city, date of birth, telephone number and the data related to your order.

Legal basis for the processing of personal data

Art. 6 Paragraph 1 Letter b GDPR (Implementation of (pre)contractual measures)

Purpose of data processing

PayPal carries out a credit check when the "PayPal" payment method is selected. Mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). PayPal bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognized scientific procedures. Please also refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Duration of storage

We will store the relevant data for processing the payment for as long as it is necessary to carry out the transaction. If the data is subject to statutory retention periods, it will be deleted after the retention period has expired. The duration for which PayPal stores the data is set out in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Option to object and delete

You can object to processing at any time in accordance with Art. 21 GDPR and request deletion of the data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

INTEGRATION OF EXTERNAL WEB SERVICES AND PROCESSING OF DATA OUTSIDE THE EU

On our website we use active content from external providers, so-called web services. When you access our website, these external providers may receive personal information about your visit to our website. This may involve processing data outside the EU. You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser. This may lead to functional restrictions on the websites you visit.

We use the following external web services:

Sihot

On our website we use the Sihot service from GUBSE Aktiengesellschaft, Bahnhofstraße 26-28, 66578 Schiffweiler, Germany, email: info.de@sihot.com, website: https://www.sihot.com/. Personal data is only transmitted to servers in the European Union.

The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which you have given on our website.

The service is a plug-in that we need in order to be able to show you all the content on our website. The plug-in makes our website more attractive and easier to experience for our visitors.

You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this data protection notice.

You can find more information about handling the transferred data in the provider's data protection notice at https://www.sihot.com/rechtliche-informationen/.

Information about the use of cookies

What personal data is collected and to what extent is it processed?

We integrate and use cookies on various pages to enable certain functions on our website and to integrate external web services. So-called "cookies" are small text files that your browser can save on your access device. These text files contain a characteristic character string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as "setting a cookie". Cookies can be set by the website itself as well as by external web services. The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also enables us to recognize individual visitors using pseudonyms, e.g. an individual or random ID, so that we can offer more personalized services. Details are listed in the table below.

Legal basis for the processing of personal data

If the cookies are processed on the basis of consent in accordance with Art. 6 Para. 1 lit. a GDPR, this consent also counts as consent within the meaning of Section 25 Para. 1 TTDSG for the setting of the cookie on the user's device. If another legal basis is mentioned under the GDPR (e.g. for contract performance or to fulfill legal obligations), the storage or setting is based on an exception in accordance with Section 25 Paragraph 2 TTDSG. This applies “if the sole purpose of storing information in the end user’s terminal equipment or the sole purpose of accessing information already stored in the end user’s terminal equipment is to carry out the transmission of a message via a public telecommunications network” or “if the storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user”. The relevant legal basis can be found in the cookie table listed later in this point.

Purpose of data processing

The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also allows us to recognise individual visitors using pseudonyms, e.g. a unique or random ID, so that we can offer more tailored services. Details are provided in the table below.

Duration of storage

Our cookies are stored in your browser until they are deleted or, if it is a session cookie, until the session has expired. Details are listed in the table below.

Option to object and remove

You can set your browser to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save the last offers you viewed (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

-Cookie name = PHPSESSID

-Server = www.siebenwelten.de

-Provider = website operator

-Purpose = We use the "PHPSESSID" cookie to manage the user session on our website. The purpose of this cookie is to provide a unique identifier for a user's session while they visit our website. This allows us to track the state of the session and ensure that the server can correctly identify the user to ensure smooth interaction with the website. The cookie usually contains a random string of characters that acts as a session ID. After the session ends, e.g. when the user closes the browser, the cookie is usually deleted.

-Legal basis = Art. 6 Para. 1 lit. f GDPR (legitimate interests)

-Storage period = session

-Type = comfort

Data security and data protection, communication by email

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. If communication is unencrypted by email, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or sending information by post if it is a matter of high confidentiality.

Right to information and requests for correction - deletion & restriction of data - revocation of consent - right of objection

Right to information

You have the right to request confirmation as to whether we process personal data about you. If this is the case, you have the right to information about the information specified in Art. 15 Para. 1 GDPR, provided that the rights and freedoms of other persons are not impaired (cf. Art. 15 Para. 4 GDPR). We will also be happy to provide you with a copy of the data.

Right to correction

According to Art. 16 GDPR, you have the right to have any personal data (such as address, name, etc.) that we have stored incorrectly corrected at any time. You can also request that the data we have stored be completed at any time. A corresponding adjustment will be made immediately.

Right to deletion

According to Art. 18 Para. 1 GDPR, in individual cases you have the right to request that the processing of your personal data be restricted.

This is the case if
• you dispute the accuracy of the personal data;
• the processing is unlawful and you do not consent to deletion;
• the data is no longer required for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims;
• an objection to processing has been lodged in accordance with Art. 21 Para. 1 GDPR and it is still unclear which interests prevail.

Right of revocation

If you have given us your express consent to process your personal data (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can revoke this at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 Paragraph 1 Letter f (within the scope of a legitimate interest). You only have this right if there are special circumstances that speak against the storage and processing.

How do I exercise my rights?

You can exercise your rights at any time by contacting the contact details below:

Freizeit-Unternehmens-Gesellschaft mbH Künzell & Co. Bäderpark KG

Harbacher Weg 66, D-36093 Künzell
E-mail: kontakt@siebenwelten.de
Tel.: 0661 397-0
Fax: 0661 397-151

RIGHT TO DATA PORTABILITY

According to Art. 20 GDPR, you have the right to have the personal data concerning you transmitted to us. We will provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.

We will provide you with the following data upon request in accordance with Art. 20 Para. 1 GDPR:
• Data that was collected on the basis of an express consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR;
• Data that we have received from you in accordance with Art. 6 Para. 1 lit. b GDPR as part of existing contracts;
• Data that has been processed as part of an automated process.

We will transfer the personal data directly to a person responsible of your choice, provided this is technically feasible. Please note that we are not permitted to transfer data that interferes with the freedoms and rights of other people in accordance with Art. 20 Para. 4 GDPR.

RIGHT TO LODGE A COMPLAINT TO THE SUPERVISORY AUTHORITY IN ACCORDANCE WITH ART. 77 Para. 1 GDPR

If you suspect that your data is being processed unlawfully on our website, you can of course seek judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 Para. 1 GDPR. You have the right to lodge a complaint in accordance with Art. 77 GDPR in the EU member state of your residence, your place of work and/or the place of the alleged violation, i.e. you can choose the supervisory authority you contact from the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a legal remedy in accordance with Art. 78 GDPR.

Changes to this data protection notice

We revise this data protection notice if there are changes to this website or if other reasons make this necessary. You can always find the latest version on this website.