Data protection information
Version 2.0, 07.12.2021
This data protection notice is intended to provide an overview of what happens to your personal data (hereinafter also referred to as "data") and to inform you about the data protection claims and rights to which you are entitled under the European General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"). We therefore ask you to take note of this data protection information and, if necessary, to print it out or save it.
Personal data is all data with which you can be personally identified. Your personal data may be processed for various purposes. Essentially, the data processing operations by Schwangau Schuh GmbH (hereinafter: "Schwangau" or "we") can be divided into the following areas of application:
- General information on data protection, data processing operations and data subject rights, which apply to all data processing operations carried out for us, can be found in Part A below.
- In connection with the websites https://haferl.com/, https://goiser.de/ or https://laszlo-budapest.com/ (hereinafter: "website/s") or comparable external online presences, such as our social media profiles (website and external online presences hereinafter jointly: "online presence"), we process data of visitors that is exchanged between their Internet-enabled end devices and the server operated by us, as well as data that is communicated to us in the course of using the website. You can find details on this under Part B.
Please visit the individual sections if you wish to obtain information on specific processing situations quickly and in context.
A. General information on data protection and data subject rights
I. Who is responsible for data processing and who can you contact if you have any questions?
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is Schwangau Schuh GmbH, Alemannenweg 7, 87645 Schwangau, phone: +49 (0) 8362 987353, fax: +49 (0) 8362 987354, email: shop@schwangau-schuh.de
The responsible contact person in Schwangau is Ms. Stephanie Kircher, ibid.
II. What rights do you have with regard to your personal data?
If your personal data is processed, you are a "data subject" within the meaning of the GDPR, which may entitle you to the rights described below. If you assert rights against Schwangau as the controller, we recommend that you address them to the contact details given in Section I:
1. right to information
In accordance with Art. 15 GDPR, you can request confirmation from us as to whether personal data concerning you is being processed by us and request information on the extent to which we process your data.
2. right to rectification
If personal data concerning you is incorrect or incomplete, you have the right to rectification and/or completion in accordance with Art. 16 GDPR.
3. right to erasure
If the legal requirements of Art. 17 GDPR are met, you can demand that we delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate erasure, e.g. in the case of statutory retention obligations.
Irrespective of the exercise of your right to erasure, we will erase your data immediately and completely to fulfill our statutory erasure obligations once the purpose of processing no longer applies, provided that there is no legal or statutory retention period to the contrary.
4. right to restriction of processing
You can request that we restrict the processing of your data in the cases specified in Art. 18 GDPR. If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
5. right to data portability
According to Art. 20 GDPR, you have the right to have data provided by you, which we process automatically on the basis of your consent or in fulfillment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
6. right to object
If we process your data on the basis of a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, you can object to this data processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions (see Art. 21 GDPR). If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising. You can object to the processing of your data for the purpose of direct advertising at any time without giving reasons.
7 Right to revoke the declaration of consent under data protection law
Some data processing operations are only possible with your express consent within the meaning of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation. Please note that even after consent has been withdrawn, it may still be possible to process the data concerned in whole or in part on the basis of other legal bases.
8. right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of data protection officers and their contact details can be found at the following link: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
If you are of the opinion that we are violating German or European data protection law when processing your data, please contact us so that we can clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for us at our company headquarters:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
E-mail: poststelle@lda.bayern.de
III Which personal data is processed and from which sources does this data originate?
1. origin of the personal data
Via our online presence, we process data that we receive during your visit to our website or that you actively communicate to us when using the online presence, e.g. when using our contact form or our callback service. Other data is collected automatically by our IT systems when you visit our online presence. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website. You can find details on this under Part B.
2. categories of personal data
The personal data that we regularly process includes personal master data and contact data such as First and last name, address, e-mail address, telephone number, fax, position in the company.
Depending on the type of contact, we also process the following other personal data:
- Information about the nature and content of our business relationship such as contract data, order data, sales and receipt data, customer and supplier history or purchase history
- Information about financial status (e.g. credit rating data)
- payment data
- Advertising and sales data,
- Documentation data (order histories)Technical data and information from your electronic communication with us (e.g. IP address)
- Other data that we have received from you as part of our business relationship
IV. For what purposes and on what legal basis is the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) as amended, in particular on the following bases:
1. fulfillment of (pre-)contractual obligations (Art. 6 para. 1 lit. b GDPR)
The processing of personal data takes place on the basis of Art. 6 para. 1 lit. b GDPR for the fulfillment of contractual obligations of Schwangau, in particular in connection with the provision of our services as well as all activities customary in the industry for the operation or administration of Schwangau (e.g. dispatch of goods, invoicing, debt collection). The data may also be processed at a pre-contractual level in the context of initiating business with Schwangau or in the course of other contractual relationships with Schwangau.
For example, Art. 6 para. 1 lit. b GDPR is the legal basis in the following cases:
- Creation and maintenance of a customer account
- Sending information and goods
Details on the purpose of this data processing can be found in the respective contract documents and terms and conditions.
2. protection of legitimate interests (Art. 6 para. 1 lit. f GDPR)
Based on a balancing of interests, data processing may take place beyond the actual fulfillment of a contract to protect the legitimate interests of Schwangau or third parties. This is permissible unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail. Data processing for the protection of legitimate interests takes place, for example, in the following cases
- Processing of business relationships, e.g. accounting, auditing and other steps in connection with the performance of our business relationship Background checks, consultation of and data exchange with credit agencies and government bodies to determine residence and/or creditworthiness data
- Execution of payment transactions via external service providers
- Use of debt collection service providers and lawyers to collect and/or enforce claims in court
- Assertion of other legal claims and defense in legal disputes
- Advertising or marketing
- Measures for business management and further development of our services
- Maintaining databases to improve our services
- Ensuring IT security and IT operations
- Measures for building and plant security
3. fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)
Processing of your data may be necessary in part for the purpose of fulfilling various legal obligations and requirements to which we are subject, e.g. from the German Commercial Code or the German Fiscal Code.
4. consent (Art. 6 para. 1 lit. a GDPR):
If you have given us consent to process your data in individual cases, processing will take place in accordance with the purposes specified in the declaration of consent and to the extent agreed therein. Consent given, e.g. for sending a newsletter, can be revoked at any time with effect for the future. To do so, please use the contact details provided under A. Section I or Section II or, if applicable, another address provided by us for this purpose. Please note that processing that took place before the revocation is not affected by the revocation and that under certain circumstances data processing may continue to be possible, at least in part, on the basis of another legal basis.
V. Who receives my data?
At Schwangau, those employees or organizational units receive your data that need it to fulfill our contractual and legal obligations or to process or pursue our legitimate interests.
Your data will be forwarded for the initiation or execution of a contractual relationship (e.g. provision of a service or sale of goods) in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR or - depending on the type of specific contractual relationship - as well as on the basis of our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, in particular to companies that we regularly use in connection with the provision of our services or for contract processing. This concerns the following recipients or categories of recipients
- IT service providers (e.g. email service providers, web hosting companies)
- certain service providers that we commission in connection with the business transaction, such as freight forwarders, suppliers, lawyers and defense lawyers, consultants, mediators or experts and other specialists
- advertising partners
- insurance companies
- banks
- Communication providers (telephone providers, fax providers)
- payment service providers
- Shipping and logistics service providers
- Credit agencies
- Auditors
- Tax and legal advisors
If we use a service provider in the sense of order processing in accordance with Art. 28 GDPR, we nevertheless remain responsible for the protection of your data. Where required by law, processors are contractually obliged by means of an order processing agreement to treat your data confidentially and to process it only within the scope of the provision of services. The processors commissioned by us will receive your data if they require the data to perform their respective services.
Your data will only be transmitted to state institutions, courts, law enforcement agencies, supervisory authorities, government officials and other authorities or collected for this purpose within the framework of mandatory national legislation or if this is necessary to enforce our claims and protect our rights.
VI How long will my data be stored?
Your personal data will only be used for the purpose for which you have provided it to us or for the processing of which you have given us your consent and will be stored until this specific purpose has been fulfilled. Once the purpose has been completely fulfilled, or as soon as you ask us to delete your data, your data will only be stored for as long as is necessary due to statutory limitation periods or retention periods (in particular tax and commercial law). However, the data will be deleted at the latest after all periods have expired, unless you have expressly consented to further or other use. You can also assert rights during the retention periods, such as the blocking of your data. Please see A. Section II.
Your data will be deleted or blocked by us as soon as the purpose of storage no longer applies or you request us to delete it.
Unless otherwise agreed, we will only process and, in particular, store your data until the end of the business relationship or until the expiry of the applicable limitation periods. For example, the limitation period according to §§ 195 ff. of the German Civil Code (BGB) is generally three years, but in certain cases up to thirty years. In addition, it may be necessary for data to be stored until the legally binding conclusion of any legal disputes in which the data is required as evidence.
Furthermore, we are subject to statutory documentation and retention periods (e.g. from the German Commercial Code (e.g. Section 257 HGB), the German Money Laundering Act or the German Fiscal Code (e.g. Section 147 AO). The retention and documentation periods specified there are two to ten years. For example, we would have to store your data even after termination of a contract with you for a period up to the conclusion of the tax audit of the last calendar year in which you were our customer.
VII. Is personal data transferred to a third country?
As part of our processing operations, personal data may also be transferred to entities in so-called third countries outside the EU or the EEA for certain business transactions or areas of activity that have not yet been certified by the EU Commission as having an adequate level of data protection, for example to the USA. If such a data transfer should become necessary in individual cases, this will only take place after appropriate notification and on the basis of an adequacy decision by the European Commission, standard contractual clauses, suitable guarantees for compliance with data protection or your express consent.
B. Use of our online presence
In principle, you can visit our online presences and use them for information purposes without having to provide personal information (e.g. register or otherwise provide information about yourself). In this case, we process personal data of our users only to the extent necessary to provide a functional website and our content and services, or to the extent that cookies used on the website provide us with personal information when you visit the website. Information on our own cookies can be found under B Section II. In addition to us, other cookies may also enable our partner companies or third parties to recognize your browser on your next visit. For information on such third-party cookies, please refer to B Section III.
Furthermore, the processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
I. Provision of the website and creation of log files
Description of the data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer, which your Internet browser automatically transmits to our server each time it is accessed (so-called log files). These server log files contain IP addresses or other data that make it possible to assign them to a user. This could be the case, for example, if the link to the website from which the user accesses the website or the link to the website to which the user switches contains personal data. The following information is collected:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The IP address of the user
- Date and time of access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
This data is not stored together with other personal data of the user.
Legal basis and purpose of data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the stability and security of our information technology systems (e.g. to avoid overloading the server).
Duration of storage / objection and removal options
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
II Use of cookies
Description of the data processing
Our website uses cookies or similar procedures and collects, processes and uses usage data (e.g. access times, websites accessed) or meta and communication data (IP address, device information). Cookies are text files with a characteristic string of characters that are stored in the Internet browser or by the Internet browser on the user's computer system and that enable the browser to be uniquely identified when the website is called up again. When a user accesses a website, a cookie can be stored on the user's operating system. A cookie contains a characteristic string of characters. These cookies are used to make a website more user-friendly, effective and secure. When you visit a website on which a cookie is embedded, the data you enter is stored exclusively in the cookie on your computer. In this case, data is only transmitted to the servers of our website when a page request is made.
Some cookies are deleted again at the end of the browser session when your browser is closed (so-called session cookies). These cookies are technically necessary, e.g. so that you can log in to the application and remain logged in across pages during your visit to our website.
Other cookies remain on your end device for a specified period and enable us to recognize your browser on your next visit (so-called persistent or protocol cookies). The purpose of using these cookies is to be able to offer you optimal user guidance, to "recognize" you and to be able to present you with a website that is as varied as possible and new content on repeated visits.
Cookies that originate from partner companies or third parties can be used, for example, to collect information for advertising, user-defined content or statistics ("third-party cookies"). If we do not identify cookies as originating from third-party providers, the cookies originate from our website ("first-party cookies"). We will inform you separately about third-party cookies or tracking technologies that we use in the following sections of our privacy policy.
Flash cookies are stored as data elements of websites on your computer if they are operated with Adobe Flash. Flash cookies have no time limit.
For more information about which cookies we use to make our websites more user-friendly, what purpose they serve and what data is stored with them or transmitted to third parties, please refer to our cookie management tool, which you can use to give your consent to the use of cookies when you visit our websites in accordance with the preferences you have selected.
Our cookie management tool collects log file and consent data using JavaScript. This JavaScript makes it possible to inform users about the content of their consent to certain tags on the website and to obtain, manage and document this consent. The cookie management tool stores the selected setting and the consent you gave when you entered the website and processes the following data
- Consent data (anonymized logbook data (Consent ID, Processor ID, Controller ID), Consent Status, Timestamp)
- Device data or data of the devices used (IP addresses, device information, timestamp)
- User data (browser information, SettingIDs, changelog)
For this purpose, the cookie management tool stores a technically necessary cookie in the LocalStorage ("claims").
We use the following cookies to make our website more user-friendly and store or transmit the following data:
Name of the cookie Purpose of use Storage duration Type of cookie Domain
_fbp to store and track visits to the website 91 days, 6 hours Tracking cookie Facebook.com
_gcl_au Google Analytics cookie, contains a randomly generated user ID 1 year Tracking cookie Google
_ga Google Analytics cookie, contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits 91 days, 6 hours Tracking cookie Google
Google Analytics cookie, contains a randomly generated user ID. Using this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits 91 days, 6 hours Tracking cookie Google
LocalStorage stores store data such as CMS pages, attributes, shopping cart and cookie settings for fast operation of the single page application
Persistent cookie haferl.com;
goiser.de;
laszlo-budapest.com
For more information about which cookies we use to make our website more user-friendly, what purpose they serve and what data is stored in them or transmitted to third parties, please refer to the detailed information in our cookie management tool. You can access this at any time via the "Cookie settings" link in the footer of our website or via the links below:
Cookie-Info haferl.com
Cookie-Info goiser.de
Cookie-Info laszlo-budapest.com
Legal basis and purpose of data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality and security of the website as well as a customer-friendly and effective design of the site visit, unless we ask you for your consent in accordance with Art. 6 para. 1 lit. a GDPR.
The purpose of using technically necessary cookies is to simplify the use of our websites for users. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
Duration of storage / objection and removal options
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically or using our cookie management tool as described above. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
III Statistical analysis of the website / increasing reach
1. google analytics
Description of the data processing
This website uses functions of the web analysis service Google Analytics. The provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, which in turn is a subsidiary of Alphabet Inc, ibid (hereinafter: "Google").
Google Analytics also uses so-called "cookies". The information generated by the Google cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.
We would like to inform you that this website uses Google Analytics exclusively with the extension "anonymizeIp()". This means that your IP address is not stored in full and is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. The visitor to the website cannot be identified. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
For more information about the processing of data by Google, please read Google's privacy policy: https://policies.google.com/privacy?hl=de,
Legal basis and purpose of data processing
We use Google Analytics to evaluate the use of our website and services, to compile reports on the activities on our website and services and to provide us with other services related to the use of our website and services and internet usage. We also use Google Analytics to analyze data from our other Google services for statistical purposes. Since we, as website and service operators, have a great interest in this analysis of user behaviour in order to optimize both our website and services and our offers and advertising placed there, we ask you to give your consent to the use of Google Analytics and the storage of Google Analytics cookies on the basis of Art. 6 para. 1 lit. a GDPR.
Google will use this information for the purpose of evaluating your use of the website or services, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Google also states that it may transfer this information to third parties on its own responsibility if this is required by law or if third parties process this data on behalf of Google. Google has contractually guaranteed that it will never associate your IP address with other Google data. In order to safeguard this and the data processing carried out for us, we have concluded a contract with Google for the processing of data on our behalf.
Duration of storage / objection and removal options
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
By installing the browser add-on to deactivate Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de), you can object to its use. By doing so, you inform Google Analytics that no information about the website visit should be transmitted to Google Analytics.
Furthermore, you can install an opt-out cookie on your device via this link https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable, especially for browsers on mobile devices, to prevent the future collection of data by Google Analytics on our website. Please note that if you delete the cookies on your device, you will also have to reinstall the opt-out cookie.
Alternatively, you can also set your cookie preferences using the cookie management tool we have integrated.
2 Google AdSense
Description of the data processing
We use Google AdSense, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, offered in Europe by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland to integrate advertisements within our online offering.
Google AdSense uses cookies for this purpose (see the general explanations above). By setting the cookie, it is possible to analyze the use of our website. Each time one of the individual pages of the website operated by us and on which a Google AdSense component has been integrated is accessed, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google AdSense component to transmit data to Google for the purpose of online advertising and billing of commissions. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements. If you do not agree with the storage of cookies on your computer, please follow the general instructions for this or at the end of this explanation.
Google AdSense also uses so-called web beacons (invisible graphics). These web beacons can be used to analyze information such as visitor traffic on the pages of this website.
The information generated by cookies and web beacons about the use of our website, including your IP address and the delivery of advertising formats, is transferred to a Google server in the USA and stored there. This information may be passed on by Google to Google's contractual partners (see https://support.google.com/admanager/answer/94149?visit_id=637060482444635472-69980806&rd=1). In detail, we have no influence on the data collected by Google, nor are we aware of the full extent of the data collection and the storage period. However, to the best of our knowledge, Google will not merge your IP address with other data stored by you. However, if you are logged into a Google account, your data can be assigned directly. If you do not want this assignment to your Google profile, please log out before using our website.
Legal basis and purpose of data processing
The storage of Google AdSense cookies and web beacons is based on Art. 6 para. 1 lit. f GDPR. As a website operator, we have a legitimate interest in analyzing the reach of our website.
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Objection and removal options
You can prevent the installation of cookies from Google AdSense in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive ads from third-party providers; b) by deactivating interest-based ads on Google via the link www.google. de/ads/preferences, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of our online offer to their full extent.
Further information on data protection at Google AdSense can be found at https://policies.google.com/privacy?hl=de and https://policies.google.com/technologies/ads?hl=de
3 Google Tag Manager
Description of the data processing
Google Tag Manager is a solution from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"), with which marketers can manage so-called website tags via an interface. The Google Tag Manager itself (which implements the tags) is a domain without cookies and does not collect any personal data. The Google Tag Manager helps with the integration and ensures the triggering of other tags, code snippets, tracking code and conversion pixels on a website, which in turn may collect data. Google Tag Manager does not access this data. Google Tag Manager offers us an easy-to-use user interface that does not require any in-depth programming knowledge or modifications to the website's source code.
We only use Google Tag Manager to display Google Ads (formally Google AdWords) for the purposes of our search engine marketing activities.
For more information about Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html.
4. remarketing
Description of data processing
Our website uses remarketing technologies from Google Inc. Remarketing allows you to be targeted on third-party websites with advertising for content that you have already shown an interest in on our website. Studies show that such user-related advertising is more interesting for you than advertising without a personal reference. The insertion of advertising is made possible by the setting of cookies and is based on an analysis of your previous user behavior (see Part B Section III. 2). However, no personal data is stored about you or information collected that we could directly link to your person.
Legal basis and purpose of data processing
The cookies required for remarketing are stored on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Otherwise, we base the evaluations and other data processing operations required for remarketing on Art. 6 para. 1 lit. f GDPR. As a website operator, we have a legitimate interest in analyzing the reach of our website.
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics (see Part B Section III. 1).
Objection and removal options
If you still do not agree with remarketing, you can prevent the setting of cookies for the future via the settings of your Internet browser and delete existing cookies, see Section II, or you can set an opt-out cookie in accordance with Section III 1. Alternatively, you can also set your cookie preferences using the cookie management tool we have integrated.
5 Facebook Ad / Facebook Custom Audience ("Facebook Pixel")
Description of the data processing
Our website uses the visitor action pixel ("Facebook pixel") from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") to measure conversions.
The Facebook pixel can be used to track the behavior of site visitors after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes (so-called "conversion") and future advertising measures to be optimized, for example to determine the visitors to our online offer as a target group for the display of ads (so-called "Facebook ads"). In particular, we can subsequently determine that the Facebook ads placed by us are only displayed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences").
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/policy). This enables Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
You can find further information on protecting your privacy in Facebook's privacy policy https://www.facebook.com/about/privacy/.
Legal basis and purpose of data processing
Since we as website and service operators have a great interest in this analysis of user behavior in order to optimize both our website and services as well as our offers placed there and our advertising, we ask you to give your consent to the use of the Facebook pixel and the storage of the cookies required for this on the basis of Art. 6 para. 1 lit. a GDPR. We also use Facebook Custom Audience on the basis of our legitimate interests in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR, as well as our interest in targeting our users who have already shown an interest in our website or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) with advertising. Studies show that such user-related advertising is more interesting for users than advertising without a personal reference.
Duration of storage / objection and removal options
You can deactivate the remarketing function "Custom Audiences" at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook. Further information can be found at https://www.facebook.com/settings?tab=ads.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement
Alternatively, you can also set your cookie preferences via the cookie management system we have integrated.
6. use of Shop-Vote:
Description of the data processing
Our pages use Shop-Vote. You can recognize this by the Shop-Vote seal. We have integrated Shop-Vote graphics on this website to display our Shop-Vote seal and any collected and/or aggregated ratings.
When the Shop-Vote graphics are called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the source of the call (access data) and documents the call. This access data is not analyzed and is automatically overwritten no later than seven days after the end of the page visit. No other personal data is collected or stored by the shop-vote graphics.
Legal basis and purpose of data processing
The use of Shop-Vote serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit f GDPR.
If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your order number and email to the Shop-Vote evaluation platform of Blickreif GmbH, Alter Messplatz 2, 80339 Munich (www.shopvote.de) so that they can send you an evaluation reminder by email.
Possibility of objection and removal
You can revoke your consent at any time by sending a message to the data controller in accordance with Section I or to the rating platform.
IV. Further information on procedures, plugins and tools used to design the website
1. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
2. google maps
Description of the data processing
We use an API interface to integrate Google Maps, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which is offered in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display interactive maps and create directions on our website.
In order for Google Maps to provide its full service, the company must collect and store data from you. This includes the search terms entered, your IP address and also the latitude and longitude coordinates. If you use the route planner function, the start address you enter is also saved. However, this data storage takes place on the Google Maps websites. We can only inform you about this, but cannot influence it. Each time Google Maps is called up, Google sets at least one cookie (name: NID) in order to process user settings and data when the page on which the Google Maps component is integrated is displayed. This provides Google with information such as your IP address or that you have accessed the corresponding subpage of our website. This cookie stores data about your user behavior. Google uses this data primarily to optimize its own services and to provide you with individual, personalized advertising. As a rule, this cookie is not deleted when you close your browser, but expires after a certain period of time unless you delete it manually beforehand.
If you are logged into your Google user account during use, the aforementioned data will be assigned directly to your account in accordance with your user agreement with Google. If you do not want this assignment, you must log out of your Google user account before using the Google Maps functions.
Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. According to Google, such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
We do not receive this data ourselves and do not initiate its collection. In the case of requests for information and the assertion of user rights, we would like to point out that these can be asserted most effectively with Google as the provider of Google Maps and the body responsible for this. Only the providers have access to the user's data and can take appropriate measures and provide information directly.
Legal basis and purpose of data processing
The use of Google Maps is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in a simple and effective way to reach us.
Duration of storage / possibility of objection and removal
If you do not want this association with your profile on Google, you must log out before using our subpage on which Google Maps is integrated. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Please also note the Google opt-out plugin: http://tools.google.com/dlpage/gaoptout?hl=de, or Google's settings for the display of advertisements: https://adssettings.google.com/authenticated
If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of deactivating this service completely by switching off the JavaScript application in your browser. Please note, however, that you will then not be able to use the corresponding functionality of our website.
2 WhatsApp Business:
Description of the data processing
We use WhatsApp Business to stay in contact with you. For this purpose, your personal data (e.g. name, telephone number, e-mail address, address, customer number) will be processed for communication regarding the preparation, implementation or billing or marketing of our services using the instant messaging service "WhatsApp" of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Personal data (in particular communication metadata) is also processed on servers in countries outside the EU (e.g. USA). WhatsApp passes this data on to other companies within and outside the book group of companies. Further information can be found in WhatsApp's privacy policy .
Schwangau has neither precise knowledge nor influence on the data processing by WhatsApp, Inc.
Legal basis and purpose of data processing
The use of WhatsApp Business is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in a simple and effective way to reach us.
Right of objection and removal
You have the right to object to the use of your data in the context of WhatsApp Business, whereby you must contact us using the contact details above to exercise this right. The revocation is valid for the future.
3. newsletter dispatch:
Description of the data processing
Schwangau would also like to inform you regularly about its product range and news via a newsletter. Schwangau requires your e-mail address and your name for this purpose.
You can subscribe to the newsletter by using the corresponding function or during the registration process by ticking a box (so-called opt-in). In addition to your e-mail address and name, your IP address and the date of registration are stored for verification purposes.
You will also receive an e-mail from us asking you to confirm your newsletter subscription again. Your e-mail address will only be activated for sending the newsletter when you activate the hyperlink in the e-mail.
Legal basis and purpose of data processing
The legal basis for sending newsletters is the consent given by you as the recipient in accordance with (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with. § Section 7 para. 2 no. 3 UWG ("Act against Unfair Competition"), or, if consent is not required for existing customers in accordance with Section 7 para. 3 UWG, on the basis of our legitimate interest in direct marketing measures in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Section 7 para. 3 UWG. § Section 7 para. 3 UWG.
Possibility of objection and removal
You can object to the sending of the newsletter at any time. We have provided instructions on how to do this at the end of each newsletter. You can also contact us directly using the contact details in Section I.
V. Online presence on social networks and platforms
Description of the data processing
We maintain additional online presences within social networks or industry networks (e.g. Facebook, Instagram) (hereinafter also referred to as "SN") and platforms (e.g. YouTube) and link to them from our website. Clicking on the respective buttons (recognizable by the respective logos of the social networks or platforms) will take you to the respective online presence of the SN. The purpose of these online presences is to communicate with the customers, interested parties and users active there and to be able to inform them about our services.
When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Since the use of SN takes place outside of our website or our services, we have no influence on this, unless otherwise stated below. However, we would like to point out that when using the above-mentioned platforms and networks to which we link, data may also be processed in the USA by these SN companies and may also be processed by the respective operators for market research and advertising purposes, including the creation of user profiles. If you are logged in to the respective networks and platforms, they may also store cookies on your device that track your use of our platform or services and other information about your usage behavior.
Unless otherwise stated in our privacy policy, we only process users' data if they communicate with us within the social networks and platforms, e.g. write comments or send us messages.
In order to make it easier for you to find out about the respective data processing and the objection options of the respective operators, we refer below to the data protection declarations and information of the operators of the respective networks.
Legal basis and purpose of data processing
We only process your personal data in the context of direct contact with us via the respective SN or interaction with our presence there or its content. Unless otherwise stated in our privacy policy, we process users' data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR for the effective information of users and communication only if they communicate with us within the social networks and platforms (e.g. when users write posts on our online presences or send us messages). If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
Insofar as personal data is also processed in connection with our presence on an SN and the respective SN alone decides on the purposes and means of processing, the respective SN is otherwise the sole controller for the processing. Please check carefully which personal data you share with us via an SN website. If you wish to prevent SN from processing personal data that you have transmitted to us, please contact us by other means.
Duration of storage / possibility of objection and removal
If you are a member of one of the SNs on which we maintain online presences and do not want the SN to collect data about you via our offer and link it to your data at the SN, you must log out of your SN before visiting our offer. For a detailed description of the respective processing, information on the duration of the storage of data by the respective SN and the opt-out options, we refer to the following linked information from the providers.
In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
We maintain a Facebook company page ("fan page") on the SN of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Facebook Ireland is jointly responsible with us for the collection of data from visitors to our Fan Page, which is why we have concluded an agreement on the joint processing of personal data with Facebook within the meaning of Art. 26 GDPR, as well as additional data processing conditions:
"Controller Addendum": https://www.facebook.com/legal/controller_addendum
"Data processing conditions": https://www.facebook.com/legal/terms/dataprocessing/update
We are responsible for providing data subjects with at least the above and following information on joint controllership with Facebook. The information from Facebook required under Article 13(1)(a) and (b) GDPR can be found in the Facebook Ireland Data Policy at https://www.facebook.com/about/privacy.
Facebook Inc, Menlo Park, California, USA (hereinafter: Facebook Inc.) also collects and uses so-called Page Insights for analysis purposes. Page Insights is a summary of data that allows both us and Facebook Inc. to gain information about how our users interact with our site. Page Insights may be based on personal data collected in connection with our users' visits or interactions on our site. For this purpose, we have concluded a controller addendum with Facebook ("Controller Addendum", see above), which regulates in particular which security measures Facebook takes in the context of Page Insights and how Facebook responds to user requests. The purposes for which the collection and transmission of personal data, which constitute joint processing, are carried out are set out in detail in the above Controller Addendum.
The data collected in the context of visiting our "Fanpage" otherwise includes information about the types of content users view or interact with, or the actions they take (see under "Things you and others do and provide" in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g. IP addresses, operating system, browser type, language settings, cookie data described in detail under "Device Information" in the Facebook Data Policy: https://www.facebook.com/policy).
However, by maintaining the Facebook company page, we share responsibility for the Insights pages and have agreed with Facebook Ireland that Facebook Ireland is responsible for fulfilling the rights of data subjects in accordance with Articles 15-20 of the GDPR with regard to the personal data stored by Facebook Ireland after joint processing. Therefore, we have an obligation to notify Facebook if we receive data protection requests regarding Page Insights. Please note that we forward requests regarding Page Insights to Facebook Ireland. In addition, please refer to the information on your rights as a data subject in section A. For more information on how Facebook Ireland processes personal data, including the legal basis on which Facebook Ireland relies and the options for exercising data subjects' rights vis-à-vis Facebook Ireland, please refer to Facebook Ireland's data policy at https://www.facebook.com/about/privacy
The evaluation of the data collected via Page Insights is used to improve our websites and for advertising purposes. We maintain our Facebook fan page for the purpose of communication and simple channeling of contact requests from Facebook users. The collection of this data and its further processing is in our legitimate interest and in the legitimate interest of Facebook Inc. pursuant to Art. 6 para. 1 lit. f GDPR.
We would like to point out that we cannot switch the Page Insights technology on and off. We must therefore forward the majority of such requests to Facebook Ireland, unless we have collected data ourselves. If you do not want Facebook Inc. to collect your data, please do not use our Facebook company page and/or set your browser to prevent cookies from being set and/or log out of Facebook while using our site.
Privacy policy:
https://www.facebook.com/about/privacy/, https://www.facebook.com/legal/terms/information_about_page_insights_data
Option to object:
https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Instagram is a service of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy policy/option to object: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram help section&bc[1]=Privacy%C3%A4re%20and%20Security
VI Links to websites of other providers
Our website may contain links to other websites. has no influence whatsoever on the content and design of the offers of other providers. The statements in this data protection declaration therefore do not apply to external providers whose offers or content we merely link to.
If you are redirected to other sites via links from our pages, please inform yourself there about the respective handling of your data.
C. Miscellaneous
Due to the further development of our website or our offers as well as due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current privacy policy can be