§ 1 Information on the Collection of Personal Data


(1) GENERAL INFORMATION

We appreciate your interest in our website. The protection of your personal data during your visit to our homepage is of particular importance to our management. The following information provides an overview of the processing of your personal data by us and your rights regarding data protection. Personal data includes all data that can be attributed to you personally, such as name, address, email addresses, and user behavior.


If a data subject wishes to use special services provided by our company through our website, such as our contact form, the processing of personal data may be required. If the processing of personal data is necessary, and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing always takes place in accordance with the EU General Data Protection Regulation (GDPR) and in compliance with the specific data protection regulations applicable to our company.


As the data controller, our company has implemented technical and organizational measures to ensure the most comprehensive protection of personal data processed via this website against loss, destruction, access, alteration, or distribution by unauthorized individuals. This also includes the secure transmission of your personal data through encryption. We use the TLS (Transport Layer Security) encryption system for this purpose. You can recognize an encrypted connection by the change of the browser's address bar from "http://" to "https://" and by the padlock symbol in your browser bar.


However, due to inherent security vulnerabilities in internet-based data transmission, absolute protection cannot be guaranteed.


(2) DATA PROCESSING CONTROLLER

The data controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) and the applicable local data protection regulations is:


MINAROSO Appartements

Roso GbR

Neustaedter Straße 61

79822 Titisee-Neustadt

Telefon: 0049 15224453038

E-Mail: info@minaroso.de


Please send general data protection questions to our company atinfo@minaroso.de.


 (3) GENERAL INFORMATION ON DATA PROCESSING
We only collect and use personal data of our users to the extent necessary for providing a functional website, displaying our content, and delivering services. The collection and use of personal data of our users usually occur only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons, and the processing of data is permitted by legal regulations.
The following legal bases for processing your personal data are applicable:
Processing based on your consent (Article 6(1)(a) GDPR)
Processing for the performance of a contract in which the data subject is a party. This also applies to processing operations required for the performance of pre-contractual measures (Article 6(1)(b) GDPR).
Processing to fulfill a legal obligation to which our company is subject (Article 6(1)(c) GDPR).
Processing for the protection of vital interests of the data subject or another natural person (Article 6(1)(d) GDPR).
Processing for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests, fundamental rights, and freedoms of the data subject (Article 6(1)(f) GDPR). Legitimate interests may include:
Correctly delivering the content of our website
Conducting statistical evaluations for website assessment and optimization
Providing necessary information to law enforcement authorities in the event of a cyberattack
Responding to inquiries and providing services and/or information tailored to you
Processing and transferring personal data for internal or administrative purposes
Preventing and detecting fraud and criminal activities
Ensuring the ongoing functionality of our information technology systems and the technology of our website with the aim of enhancing data protection and data security in our company.

§ 2 Your Rights
(1) MY RIGHTS AS A DATA SUBJECT
You can request information about the data stored about you at the above address (Art. 15 GDPR). Furthermore, you can request a correction if we have incorrect data about you (Art. 16 GDPR). Under certain conditions, you can also request the deletion of your data (Art. 17 GDPR) or assert your right to object (Art. 21 GDPR). You also have the right to restrict the processing of your personal data (Art. 18 GDPR) and the right to receive the data you have provided (Art. 20 GDPR). The limitations under §§ 34 and 35 BDSG apply to the right to information and the right to deletion.
If you believe that the processing of your personal data violates the requirements of the General Data Protection Regulation, you have the right to contact your competent supervisory authority for data protection (Article 77 GDPR in conjunction with § 19 BDSG). In the case of Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10a, 70173 Stuttgart.
If data processing is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time under Article 7 GDPR. Please note that the revocation only takes effect for the future. Processing that occurred before the revocation is not affected. Please also note that we may need to retain certain data for a specific period to fulfill legal requirements.
(2) INFORMATION REGARDING YOUR RIGHT TO OBJECT PURSUANT TO ARTICLE 21 GDPR
INDIVIDUAL RIGHT TO OBJECT
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out under Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a legitimate interest); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) GDPR).
RIGHT TO OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES
In individual cases, we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for such advertising purposes. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made informally and should preferably be addressed to the contact details provided in Section 1, No. (2) (objection pursuant to Article 21(2) GDPR).

(3) WHO RECEIVES MY DATA?

Unless otherwise stipulated in the detailed descriptions of our services, those departments within our company that require access to your data for the fulfillment of our contractual and legal obligations or for the implementation of our legitimate interests will have access to your data. We will only disclose information about you outside the company when legal or regulatory obligations permit or require it, the disclosure is necessary for the processing and thus the fulfillment of the contract, or at your request, provided we have your consent, or we are authorized to provide information.

If we use contracted service providers for specific functions of our services, these service providers have been carefully selected and instructed by us, are bound by our instructions, and are regularly monitored. Your personal data is then processed based on data processing agreements in accordance with Article 28 of the GDPR, and we ensure that the processing of personal data is in compliance with the provisions of the GDPR.

If we intend to use your data for advertising purposes, we will inform you in detail about the respective processes below.

(4) HOW LONG WILL MY DATA BE STORED?

Unless otherwise regulated in the detailed descriptions of our services, we process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations.

Your personal data will be regularly deleted or blocked when it is no longer necessary for the fulfillment of contractual or legal obligations, you have exercised your right to deletion, all mutual claims have been satisfied, and there are no other legal retention requirements or justifications for storage.


§ 3 Collection of Personal Data when Visiting Our Website

(1) USE OF SERVER LOG FILES

With each visit to the website by an affected person or an automated system, a series of general data and information is recorded in log files. This includes an Internet Protocol address (IP address), the types and versions of browsers used, the website from which an accessing system reaches our website (so-called referrers), the subpages accessed by an accessing system on our website, the date and time of access to the website, and similar data and information that serves to prevent security breaches in the event of attacks on our information technology systems.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR, based on the legitimate interests mentioned above.

Temporary storage of the IP address by the system is necessary to allow the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

The storage in log files is carried out to ensure the functionality of the website. The data also helps us optimize the website and ensure the security of our information technology systems. Our legitimate interest in data processing, pursuant to Article 6(1)(f) of the GDPR, underlies these processes. The data is deleted as soon as it is no longer required to achieve the purpose of its collection. In the case of data collection for the provision of the website, this occurs when the respective session is terminated. The collection of data for the provision of the website and the storage of data in log files are necessary for the operation of the website. Another option to review log files is available in cases where concrete indications of unlawful use or specific attacks on our website arise. In such cases, our legitimate interest in data processing lies in the purpose of investigating and prosecuting such attacks and unlawful use.

(2) USE OF COOKIES

"Cookies" are small files that are stored on users' devices. They can be either temporary for the duration of a session (session cookies) or permanent (persistent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain on your end device until you delete them manually or until your web browser automatically deletes them. Cookies can store various information, such as language settings on a website or the point at which a video was viewed.

Cookies are typically used when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. These profiles are used to display content to users that matches their potential interests. This process is also known as "tracking," i.e., tracking the potential interests of users. The term "cookies" also includes other technologies that fulfill the same functions as cookies (e.g., when user information is stored based on pseudonymous online identifiers, also known as "user IDs").

If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy.

Notes on legal bases: The legal basis for the processing of your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent (Article 6(1)(a) GDPR). Otherwise, data processed using cookies is based on our legitimate interests (Article 6(1)(f) GDPR), for example, in the efficient operation of our online offering and its improvement, or if the use of cookies is necessary to fulfill our contractual obligations (Article 6(1)(b) GDPR).

General information about revocation and objection (opt-out): Regardless of whether processing is based on consent or legal permission, you have the option at any time to revoke consent given or to object to the processing of your data using cookie technologies or to withdraw your consent (collectively referred to as "opt-out").

You can initially declare your objection using the settings of your browser, for example, by disabling the use of cookies (which may also restrict the functionality of our online offering).

Processing of cookie data based on consent: Before we process data in the context of using cookies or have it processed, we ask users for their revocable consent. Until consent is given, only cookies that are necessary for the operation of our online offering will be used. Their use is based on our interest and the interest of users in the expected functionality of our online offering.

COOKIE SETTINGS / OBJECTION OPTION

Cookies verhindern


We would like to inform you that this setting will be deleted if you delete your cookies. You can object to the collection and transmission of personal data or prevent the processing of this data by disabling the execution of JavaScript in your browser. Additionally, you can prevent the execution of JavaScript code altogether by installing a JavaScript blocker (e.g., https://noscript.net/ or https://www.ghostery.com). Please be aware that in this case, you may not be able to fully utilize all the features of our website.



§ 4: Additional Functions and Services of Our Website

In addition to the purely informative use of our website, we offer various services that you can use if interested. Typically, you will need to provide further personal data for the provision of each respective service, and the principles of data processing mentioned above apply.
(1) Inquiry via Email, Phone, or Fax
We offer the option to get in touch via email, phone, or fax. When using these means of communication, the transmitted personal data of the user (e.g., name, inquiry) is stored and processed. The data serves exclusively for further correspondence and the purpose of addressing your inquiry, and will not be shared with third parties without your consent. Art. 6(1)(f) GDPR forms the legal basis for processing data transmitted during contact for the purpose of effective handling of inquiries directed to us.
If the contact aims to conclude a contract, the legal basis for processing, in addition to the implementation of pre-contractual measures and potential subsequent processing for contract fulfillment, is Art. 6(1)(b) GDPR.
Personal data processed within the context of general contact inquiries via email, phone, or fax is stored only until the respective correspondence is concluded. The conversation is deemed concluded when it is evident from the circumstances that the relevant matter has been resolved conclusively. Mandatory legal requirements, particularly retention periods, remain unaffected.
In the case of email contact with us, you can, of course, object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
(2) Use of Contact Forms
On our website, contact forms are also available for electronic communication. Data entered by the user through these forms is transmitted to us and stored. The legal basis for processing data when using the contact form is Art. 6(1)(f) GDPR. Our legitimate interest lies in effectively processing user inquiries received through the contact form.
If the contact aims to conclude a contract, the legal basis for processing, in addition to the implementation of pre-contractual measures and potential subsequent processing for contract fulfillment, is Art. 6(1)(b) GDPR.
Personal data processed within the context of general contact inquiries via the contact form is stored only until the respective correspondence is concluded. The conversation is deemed concluded when it is evident from the circumstances that the relevant matter has been resolved conclusively. Mandatory legal requirements, particularly retention periods, remain unaffected.
In the case of contact with us, you can, of course, object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
Section 5: Changes to Our Data Protection Regulations
We reserve the right to adjust this data protection declaration to ensure it consistently complies with the current legal requirements or to implement changes to our services in the data protection declaration, such as when introducing new services. The new data protection declaration will apply for your next visit.