Data protection declaration for the online sale of package offers of Sächsische Staatsbäder GmbH (SSB)

The following privacy policy applies to the use of our website and the purchase of package deals.
www.saechsische-staatsbaeder.de

Data protection is a matter of trust and your trust is important to us. We respect your privacy and personality. The protection and legally compliant collection, processing and use of your personal data is therefore an important concern for us. So that you feel safe when visiting our websites, we strictly observe the legal provisions when processing your personal data, taking into account the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and would like to inform you here about our data collection and use of data.

You can use this document download and print it out using the usual functionality of your browser.

By agreeing to the following data protection declaration, you consent to the collection, processing and use of your personal data by Sächsische Staatsbäder GmbH (hereinafter: SSB) in compliance with data protection laws and the following provisions.

1. Responsible

The person responsible for the collection, processing and use of your personal data is

Saxon State Baths GmbH
Badstrasse 6
08645 Bad Elster
Fax: 037437 71-222
Email: datenschutz@saechsische-staatsbaeder.de

If you wish to object to the collection, processing or use of your data by SSB in accordance with these data protection regulations, you are welcome to send your objection by email, fax or letter to the above contact address.

2. Relevant legal bases

In accordance with Art. 13 DSGVO we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 para. 1 lit. c DSGVO, and the legal basis for processing for the protection of our legitimate interests is Art. 6 para. 1 lit. f DSGVO. In the event that vital interests of the data subject or any other natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO as legal basis.

3. Cooperation with contract processors and third parties

If, as part of our processing, we disclose data to other people and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (such as to payment service providers) in accordance with Article 6 Paragraph 1 lit. b GDPR, you have consented, a legal obligation requires this or on the basis of our legitimate interests.

If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.

4. Collection of personal data

If you have provided us with personal data, we will use it exclusively for the purpose of the entire contract processing, to fulfill your wishes and requirements, to answer your inquiry (e.g. via email or our contact form) or any later queries or warranty cases and for technical purposes Administration of our website.

4.1 Personal Information

Personal data is information about the factual or personal circumstances of a specific or identifiable natural person.
SSB collects the following personal data:

• Your name,
• your reference number
• Your email address,
• Your phone number,
• Your Address,
• as well as all inventory data that you provide to us when registering and creating your customer account.

Statistical data that we collect, for example, when you visit our website and that cannot be directly linked to you personally is not included here. For example, these are statistics about which pages are particularly popular or how many users visit certain SSB pages.

4.2 Log files

Every time the SSB pages are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records saved contain the following data:

• date and time of retrieval,
• name of the page accessed,
• Computer and IP address
• Referrer URL (origin URL from which you were redirected to the SSB website),
• Product and version information of the browser used.

(*) IP addresses are only saved for data protection purposes. This information is not statistically evaluated, but is used solely to protect us in the event that a crime has been committed by the user.

4.3 customer account

We set up password-protected direct access to the inventory data (customer account) stored by us for every customer who registers accordingly. You undertake to treat your personal access data confidentially and not to make it accessible to unauthorized third parties. We cannot accept any liability for misused passwords unless we are responsible for the misuse.

5. Processing and use of your personal data

If you have provided us with personal data, we will use it exclusively for the purpose of the entire contract processing, to fulfill your wishes and requirements, to answer your inquiry (e.g. via email or our contact form) or any subsequent warranty cases and for the technical administration of our website.

Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or billing or if you have given your prior consent. As part of contract processing, for example, the contractual partners we use (such as hotels, guesthouses) receive the necessary data for order and contract processing. The data passed on in this way may only be used by our contractual partners to fulfill their task. Any other use of the information is not permitted and does not occur with any of the contractual partners we entrust.

5.1 Use of your data for advertising purposes

If you have consented, we will also use the data to permanently inform you by letter or email about certain products, services or promotions.

If you have given us your consent to the use, processing and transmission of your personal data for advertising purposes, you can revoke this at any time without observing a specific form or deadline with future effect from the person responsible (see 1. Person responsible).

After you revoke your consent, we will only use your data to process the order and will refrain from sending advertising. 

During competitions, we use your data for the purpose of notifying you of the winner. Detailed information is contained in the terms and conditions of participation for the respective competition.

6. Duration of data storage

Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.

In some cases, the law requires the storage of personal data, for example in tax or commercial law. In these cases, we will only continue to store the data for these purposes, but will not process it in any other way and will delete it after the statutory retention period has expired.

7. Cookies

Accepting cookies is not a prerequisite for visiting our website. However, we would like to point out that our website and service only have limited functionality if you do not allow us to set cookies.

7.1 What are cookies?

Cookies and Flash Cookies are small files that are stored on your data carrier and which store certain settings and data for exchange with our system via your browser. Basically, there are two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data carrier for a longer period of time or permanently. This storage helps us to design our website and our offers accordingly for you and makes it easier for you to use it, for example by saving certain entries from you so that you do not have to repeat them constantly.

7.2 Which cookies does SSB use?

Most of the cookies we use are automatically deleted from your hard drive at the end of the browser session (hence also session cookies). Session cookies are required, for example, to offer you the shopping cart function across multiple pages. We also use cookies that remain on your hard drive. When you visit again, it will automatically be recognized that you have already been with us and which entries and settings you prefer. These temporary or permanent cookies (lifespan of one month to ten years) are stored on your hard drive and delete themselves after the specified time. These cookies serve in particular to make our offering more user-friendly, effective and secure. Thanks to these files, it is possible, for example, for you to receive information on the site that is specifically tailored to your interests. The sole purpose of these cookies is to adapt our offering to your customer requirements as best as possible and to make your surfing with us as comfortable as possible.

7.3 What data is stored in the cookies?

No personal data is stored in the cookies used by SSB. The cookies we use cannot be assigned to a specific person and therefore cannot be assigned to you. When the cookie is activated, it is assigned an identification number. It is not possible at any time to assign your personal data to this identification number. Your name, your IP address or similar data that would enable the cookie to be assigned to you are never requested. Based on cookie technology, we only receive anonymized information, for example about which pages of our shop were visited, which products were viewed, etc.

7.4 Are there also third-party cookies (so-called third-party cookies)?

The SSB uses a number of advertising partners who help to make the Internet offering and the websites more interesting for you. Therefore, when you visit the websites, cookies from partner companies are also stored on your hard drive. These are temporary/permanent cookies that are automatically deleted after the specified time. These temporary or permanent cookies (lifetime 14 days to 10 years) are stored on your hard drive and delete themselves after the specified time. The cookies from our partner companies also only contain pseudonymous, mostly anonymous data.

7.5 How can you prevent the storage of cookies?

You can set your browser to only accept the storage of cookies if you agree to this. If you only want to accept the SSB cookies but not the cookies from our service providers and partners, you can select the “Block third-party cookies” setting in your browser. As a rule, the help function in the menu bar of your web browser will show you how you can reject new cookies and switch off those you have already received. If you use shared computers that are set to accept cookies and Flash cookies, we recommend that you always log out completely after you have finished using them. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

7.6 How frequently is this cookie statement updated?

SSB may change this cookie statement from time to time, for example to reflect changes to the cookies used or if this is necessary for other operational, legal or regulatory reasons. Please consult this Cookie Statement regularly to stay informed about our use of cookies and similar technologies. 

8. Online presence in social media

SSB maintains online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services.

Please note that data of users may be processed outside the European Union. This may pose risks for users, for instance, because it could make it more challenging to enforce users' rights. Concerning US providers certified under the Privacy Shield, we would like to highlight that they commit to complying with EU data protection standards.

Typically, user data is processed for market research and advertising purposes. For instance, user behavior and resulting interests can be used to create user profiles. These profiles, in turn, might be utilized to display advertisements within and beyond the platforms, presumably aligning with the users' interests. For these purposes, cookies are typically stored on users' devices, containing information about their usage behavior and interests. Additionally, data can be stored in user profiles independent of the devices used by users (especially if users are members of these platforms and are logged in).

The processing of the personal data of the users takes place on the basis of our legitimate interests in an effective information of the users and communication with the users according to Art. 6 Abs. 1 lit.f. GDPR. If the users are asked for their consent to the data processing by the respective providers (i.e. declare their consent, e.g. by ticking a check box or confirming a button), the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.

For detailed information about the respective processing and opt-out possibilities, please refer to the linked information provided by the providers.

Regarding requests for information and the exercise of user rights, please note that these are most effectively addressed to the providers. Only the providers have access to users' data and can take appropriate measures or provide information directly. If you still require assistance, you can contact us.

- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

– Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Data protection declaration: https://policies.google.com/privacy, Opt-out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Data protection declaration/opt-out: http://instagram.com/about/legal/privacy/.

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/de/privacy, Opt-out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

9. Facebook, Custom Audiences and Facebook Marketing Services

Due to SSB's legitimate interests in the analysis, optimization and economic operation of the website and for these purposes, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo, is used within the SSB website Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) is used.

Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection lawhttps://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook pixel, Facebook is able to determine visitors to the SSB website as a target group for displaying advertisements (so-called “Facebook ads”). Accordingly, the SSB uses the Facebook pixel to show the Facebook ads we place only to those Facebook users who have also shown an interest in the SSB website or who have certain characteristics (e.g. interests in certain topics or Products that are determined based on the websites visited) that the SSB transmits to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, the SSB also wants to ensure that its Facebook ads correspond to the potential interest of users and do not appear annoying. With the help of the Facebook pixel, the SSB can also understand the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users go to the company website after clicking on a Facebook advertisement (www.saechsische-staatsbaeder.de) were forwarded (so-called “conversion”).

The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on the presentation of Facebook Ads, in the data usage policy of Facebook: https://www.facebook.com/about/privacy, Special information and details about the Facebook pixel and how it works can be found in the Help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions on the usage-based advertising settings: https://www.facebook.com/settings?tab=ads, The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices.

To prevent your data from being collected using the Facebook pixel on the SSB website, please click the following link:

Facebook Opt Out

Note: If you follow this link, you will come to a website where, when you click on a button, an “opt-out” cookie is stored on your device. If you delete the cookies in this browser, you will have to click the button again. Furthermore, the opt-out only applies within the browser you are using and only within our website saechsische-staatsbaeder.de on which the link was clicked.

You may also opt out of the use of cookies for distance measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/) contradict.

10. Web Analysis

In order to continually improve and optimize our offering, we use so-called tracking technologies. For this we use the services of Google Inc (“Google”). If you do not wish to use one or more Google functions, you can do so in the relevant settings under https://myaccount.google.com/ deactivate. You can also use the Network Advertising Initiative (NAI) consumer opt-out page. http://www.networkadvertising.org/choices/ check which of the participating sites set cookies in your browser and deactivate them. Further details on Google's use of cookies and Google's privacy policy can be found at: https://policies.google.com/ . view

10.1 Google Analytics

This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

You can find further information on the use of data by Google, setting and objection options on the Google website: https://www.google.com/intl/de/policies/privacy/partners ( "How Google uses data when you use websites or apps of our partners"), https://policies.google.com/technologies/ads ( "Use of data for advertising purposes"), adssettings.google.com/authenticated ("Managing information that Google uses to show you advertising").

10.1.1 Browser Plugin

Google will use this information on behalf of SSB to evaluate the use of the website by users, to compile reports on activities within the website and to provide us with other services related to the use of the website and internet usage. Pseudonymous user profiles can be created from the processed data.

10.1.2 IP anonymization

The SSB uses the “Activation of IP anonymization” function on this website. However, this means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

10.1.3 Objection to data collection

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: deactivate Google Analytics. An opt-out cookie is stored on your device. If you delete your cookies, you must click this link again.

11. Use of plugins

11.1 Facebook

Our website uses social plugins (“plugins”) from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

If you access a page on our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted from Facebook directly to your browser and integrated into the website. User usage profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.

By integrating the plugins, Facebook receives the information that you have accessed the corresponding page on our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or making a comment, the corresponding information will be transmitted from your browser directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of data collection and the further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's data protection information: https://www.facebook.com/policy.php

If you do not want Facebook to collect data about you via our website, you must log out of Facebook and delete its cookies before visiting our website. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US side http://www.aboutads.info/choices/ or the EU side http://www.youronlinechoices.com/, The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices. 

To prevent Facebook from collecting your data on our website, please click the following link:

Facebook Opt Out

Note: If you follow this link, you will come to a website where, when you click on a button, an “opt-out” cookie is stored on your device. If you delete the cookies in this browser, you will have to click the button again. Furthermore, the opt-out only applies within the browser you are using and only within our website saechsische-staatsbaeder.de on which the link was clicked.

11.2 Twitter

Our website uses social plugins (“plugins”) from the social network Twitter, which is operated by Twitter Inc., 795 Folsom St. Sweet 600, San Francisco, CA 94107, USA (“Twitter”). 

By using Twitter and the “retweet” function, the websites you visit are linked to your Twitter account and made known to other users. This data is also transmitted to Twitter. 

We have no knowledge of the content of the transmitted data or its use by Twitter. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your related rights and setting options to protect your privacy can be found in Twitter's data protection information: https://twitter.com/privacy?lang=de

11.3 YouTube

This website uses the YouTube embedding function to display and play videos from the provider “Youtube”. The extended data protection mode is used here, which, according to the provider, only starts saving user information when the video(s) are played. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. Regardless of whether the embedded videos are played, every time this website is accessed, a connection to the Google “DoubleClick” network is established, which can trigger further data processing operations without our influence. Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/

11.4 Instagram

Our website uses plugins from the Instagram network, which is operated by Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

When you click on the Instagram button, the plugin establishes a direct connection between your browser and the Instagram server. This sends Instagram the information that you have visited our site with your IP address.

We do not know the purpose and scope of the data collection and the further processing and use of this data by Instagram. In this regard and with regard to your rights and setting options to protect your privacy, we ask you to observe Instagram's corresponding data protection information: https://help.instagram.com/155833707900388 

11.5 Vimeo

We use the provider Vimeo to integrate videos. Vimeo is operated by Vimeo, LLC, with headquarters at 555 West 18th Street, New York, New York 10011.

We use plugins from the provider Vimeo on some of our websites. If you call up the Internet pages of our Internet presence provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which of our websites you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, such as clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies.

Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.

12. Newsletter of the Saxon State Baths GmbH

We send our newsletter via the provider Mailingwork GmbH, Birkenweg 7, 09569 Oederan (“Mailingwork”). The email addresses and data of our newsletter recipients are stored on our behalf on Mailingwork's servers in Germany.

Mailingwork uses this information to send and evaluate the newsletter exclusively on our behalf, but not for its own purposes. This processing is based on your consent, which can be revoked at any time in the future, in accordance with Art. 6 Para. 1 lit.a. GDPR. There is a contract for order processing with Mailingwork GmbH, in which our shipping service provider ensures comprehensive protection of your personal data from unauthorized access or GDPR-compliant data processing while taking into account the protection and protection of the rights of the data subjects. Mailingwork has also been certified as a reputable email marketing service provider by the Certified Senders Alliance.

13. Secure data transmission

Your personal data is transmitted securely to us using encryption. This applies to your order and also to the customer login. We use the SSL (Secure Socket Layer) coding system. Although no one can guarantee absolute protection, we secure our website and other systems through technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons.

14. User rights

As a user, you have the right to request free information about which personal data about you has been stored. You also have the right to correct incorrect data and to restrict processing or delete your personal data in accordance with Art. 17 GDPR. If applicable, you can also exercise your right to data portability.

According to the Federal Data Protection Act, our customers have, among other things, the right to free information about their stored data and, if necessary, the right to correct, block or delete data.

If you have any questions, comments or complaints about the handling of your personal data, please feel free to contact our data protection officer at datenschutz@saechsische-staatsbaeder.de or to a person responsible for data protection Supervisory authority contact.

15. Changes to the Privacy Policy

New legal requirements, business decisions or technical developments may require changes to our data protection declaration. The data protection declaration will then be adjusted accordingly. You can always find the latest version on our website.

Stand: January 2022

Saxon State Baths GmbH