Privacy Policy

The Hotel St. Elisabeth is pleased to welcome you to our website. We want you to feel comfortable and secure while browsing our site. That is why we take the protection of your personal data very seriously. We comply with the provisions of the Church Data Protection Act (KDG) and, where applicable, those of the European Union’s General Data Protection Regulation (GDPR).

Scope of Application

The following privacy notice explains what personal data we process when you use our website and for what purposes. This notice applies to all content on this website as well as to our other websites and online offerings (e.g., newsletters, forms, or advertisements). If we link to websites operated by other providers (e.g., Facebook, Instagram) or provide content there, the privacy policies of the respective providers also apply.

Section I. General Information

1. Collection of Personal Data

In the following, we provide information about the collection of personal data when you use this website, which you are currently visiting and on which this Privacy Policy is available. Personal data refers to any data that can be linked to you personally, such as your name, address, or email address, as well as information about your user behavior.
We process your personal data in compliance with the provisions of the Church Data Protection Act (KDG), as well as the European General Data Protection Regulation (GDPR), the New Federal Data Protection Act (BDSG), and all other relevant laws governing the processing of personal data.
We collect and use our users’ personal data only to the extent necessary to provide a fully functional website and our content and services, or to the extent that processing is required by law, permitted by law, or authorized by consent.
Voluntary information is marked as such. There are no consequences for not providing this data. However, in individual cases, failure to provide such data may make it more difficult or delay the processing of a request.
For the sake of better readability, this privacy policy does not use gender-specific terminology. The corresponding terms apply to all genders in the spirit of equal treatment.

2. Data Controller, Contact Information for Our Data Protection Officer

a) Data controller pursuant to Article 4(7) of the GDPR

ProGast Hotelbetriebs-GmbH
Shareholder: Hegne Monastery Foundation, a foundation with legal capacity under civil law and a church foundation,
Board of Directors: Prof. Dr. Florian Kluger (Spokesperson), Sr. Benedicta-Maria Kramer
Konradistraße 1
78476 Allensbach-Hegne
Email: info@st-elisabeth-hegne.de
Phone: +49 (0)7533.9366-2000

b) Contact information for the data protection officer

Data Protection Officer
c/o ProGast Hotelbetriebs-GmbH
Konradistraße 1
78476 Allensbach-Hegne
Email: datenschutz@kloster-hegne.de

3. Legal Basis for Our Data Processing

The legal basis for data processing is set forth in Article 6 of the GDPR and Section 6 of the KDG. Our data processing activities are primarily based on the following legal provisions:

Based on consent, Art. 6(1), first sentence, subparagraph (a) of the GDPR
for the performance of a contract or for pre-contractual measures, Art. 6(1), first sentence, subparagraph (b) of the GDPR
To comply with legal obligations, Art. 6(1)(c) of the GDPR
To protect legitimate interests, Art. 6(1)(f) of the GDPR

The applicable legal basis is specified below for each processing activity in this Privacy Policy, in accordance with Article 13 of the GDPR.

4. Recipients of Personal Data

To the extent that we use external service providers for individual functions of our services or process personal data for advertising purposes, we provide information below in this Privacy Policy regarding the respective processing activities.
We treat your personal data confidentially and in accordance with applicable data protection regulations, in particular the Church Data Protection Act (KDG) and the General Data Protection Regulation (GDPR).
Use of our website is generally possible without registration. For statistical and security-related purposes, data such as pages accessed, file names, and the date and time of access may be processed on the server side. This data generally does not allow for any direct identification of you personally. If personal data—such as your name, address, email address, or phone number—is collected on our website, this is done in accordance with the applicable data protection regulations. Data will only be disclosed to third parties if there is a corresponding legal basis for doing so, if you have given your consent, or if the disclosure is necessary to fulfill legal or contractual obligations. External service providers may be engaged within the framework of commissioned processing, subject to our instructions.
We have implemented appropriate technical and organizational measures to protect the personal data processed via this website from unauthorized access, loss, misuse, and manipulation. However, complete protection cannot be guaranteed during data transmission over the Internet, for example, when communicating via email.
You are free to provide us with personal data through alternative means, such as by phone or mail.

5. Your Rights as a Data Subject

i) In accordance with the provisions of the Church Data Protection Act (KDG) and the GDPR, you have the following rights with respect to your personal data:

Right of Access, Art. 15 of the GDPR
Right to Rectification, Art. 16 of the GDPR
Right to Erasure (“Right to Be Forgotten”), Art. 17 of the GDPR
Right to Restriction of Processing, Art. 18 of the GDPR, §
Right to Data Portability, Art. 20 of the GDPR
Right to object to processing, Art. 21 of the GDPR (see also section 6 below).

(ii) You also have the right under Article 22 of the GDPR not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you, provided that the decision

is not necessary for the conclusion or performance of a contract between you, as the data subject, and us, as the data controller,
is permitted under Union or Member State law to which we are subject as the controller, and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests as a data subject; or
is done with your express consent.

iii) If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. In particular, you may exercise this right to lodge a complaint with a supervisory authority in the Member State where you are located or where the alleged infringement occurred. In Baden-Württemberg, the competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information, Königsstraße 10a, 70173 Stuttgart.

6. Your Rights to Cancel and Object

Your Right to Withdraw Consent Under Article 6(1), Sentence 1, Subparagraph (a), and Article 7(3) of the GDPR

You have the right to withdraw your consent at any time without affecting the lawfulness of the processing that has taken place up to that point. If you withdraw your consent, we will cease the relevant data processing. Please send your request to info@st-elisabeth-hegne.de if possible .

Your right to object in cases of legitimate interests pursuant to Article 6(1), first sentence, subparagraph (f), and Article 21 of the GDPR

Under Article 21 of the GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is collected on the basis of Article 6(1)(f) of the GDPR. We will then no longer process the personal data unless there are demonstrable compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. Please direct your objection to info@st-elisabeth-hegne.de if possible.

7. Data Deletion and Retention Period

Your personal data will be deleted or blocked as soon as the purpose of the processing no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the data controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

8. Encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential information, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Section II. Collection of Personal Data During Informational Use of Our Website; Use of Cookies

1. Data Collection for Informational Purposes Only

You can visit our website without having to provide any personal information. If you use our website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server and that is stored in log files (server log files). When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6(1)(f) of the GDPR:

IP address
Date and time of the request
Time Zone Difference from Greenwich Mean Time (GMT)
Content of the Request (Specific Page)
Access Status/HTTP Status Code
amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its user interface
Language and version of the browser software.

2. Cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie. Cookies cannot run programs or transfer viruses to your computer.
Cookies serve to make the website more user-friendly and effective overall, as well as to simplify the use of websites for users. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after changing pages. The user data collected by technically necessary cookies is not used to create user profiles.
The use of technically necessary cookies is based on the legal basis of Article 6(1)(f) of the GDPR, which is grounded in the legitimate interest in achieving the purposes described above.

Consent and cookie banner
A cookie banner will be displayed on your first visit to our website. This banner gives you the option to:

to accept or reject the use of certain cookies
to select specific categories of cookies (e.g., essential, analytics, marketing)
Your Consent to Store

Your consent is voluntary and may be revoked or modified at any time, effective for the future.

Withdrawal and Changes to Settings

You can change your cookie settings or withdraw your consent at any time. You can do this by clicking the corresponding link in the footer (e.g., “Cookie Settings” or “Privacy Settings”) on our website.

There, you can:

View your current selection
Modify or Revoke Consent
Manage Your Privacy Settings (Consent History)

Data Collected Through Cookies

Cookies can be used to automatically collect the following data without establishing a connection to any existing user account:

Name of the website accessed
File Name
Date and time of access
Page views on our website
Browser type and version
User’s Operating System
Referrer URL (the previously visited page)
IP address and the requesting provider
Session ID

The legal basis for the use of cookies is generally your consent. For essential cookies, we rely on our legitimate interest in providing you with a functional and secure website.

Managing and Disabling Cookies
You have the option to generally object to the use of cookies for online marketing purposes, particularly tracking. For many services, this can be done via the U.S. website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. You can also delete cookies that have already been set at any time using a web browser or other software programs. This is possible in all common web browsers. Alternatively, you can prevent cookies from being stored by disabling them in your browser settings.

Cookies remain stored even after a browser session ends and can be retrieved again during future visits to the site. If you do not want this to happen, you can configure your web browser to reject cookies.

Web browsers are set by default to accept cookies. However, you can disable the storage of cookies or configure your browser to prompt you before cookies are sent. For more information, please refer to the help section of the browser you are using. The links below provide instructions on how to manage and disable cookies in the most common browsers:
Chrome: support.google.com/accounts/answer/61416
Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Please note that disabling or restricting cookies may cause problems when using our services; for example, you may not be able to access the content included in your subscription, or you may have to log in again each time you visit a page. You can actively delete the cookies used on our websites at any time in the web browser you are using.

Storage duration
Your cookie consent is valid for 365 days.

a) Types of Cookies Used

This website uses the following types of cookies, the scope and functionality of which are explained below:
i) Transient cookies
“Transient cookies” are automatically deleted when you close your browser. These include, in particular, so-called session cookies. These store a so-called session ID, which allows various requests from your browser to be associated with the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
ii) Persistent cookies
“Persistent cookies” are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in your browser’s security settings.

b) Use of Cookies

Our website uses the following categories of cookies in particular:

Essential Cookies: Essential cookies are necessary for our website to function, help ensure the secure use of the website, and cannot be disabled in our systems.

Real Cookie Banner: Real Cookie Banner asks website visitors for their consent to set cookies and process personal data. To do this, each website visitor is assigned a UUID (pseudonymous user identifier) that remains valid until the cookie used to store the consent expires. Cookies are used to test whether cookies can be set, to store a reference to the documented consent, to record which services from which service groups the visitor has consented to, and, if consent is obtained in accordance with the Transparency & Consent Framework (TCF), to store the consents regarding TCF partners, purposes, specific purposes, features, and specific features. As part of the disclosure obligation under the GDPR, the consent obtained is fully documented. This includes, in addition to the services and service groups to which the visitor has consented, and if consent is obtained in accordance with the TCF standard, the TCF partners, purposes, and features the visitor has consented to, all settings of the cookie banner at the time of consent, as well as the technical circumstances (e.g., size of the visible area at the time of consent) and user interactions (e.g., clicking on buttons) that led to the consent. Consent is collected once per language. Further information can be found in Real Cookie Banner’s Privacy Policy.

Functional cookies: Functional cookies give you access to advanced features and personalization options, such as videos.

Ninja Forms: We use the WordPress plugin Ninja Forms to host and process our online forms. When you contact us via a form, we process the data you enter solely for the purpose of handling your inquiry and for related communication.
YouTube: YouTube allows content published on youtube.com to be embedded on websites to enhance the website with videos. This requires the processing of the user’s IP address and metadata. Cookies or cookie-like technologies may be stored and read. These may contain personal data and technical data such as user IDs, consents, video player settings, connected devices, interactions with the service, push notifications, and the account used. This data may be used to track websites visited, generate detailed statistics on user behavior, and improve Google’s services. It may also be used for profiling, such as to offer you personalized services, including ads based on your interests or recommendations. Google may link this data to the data of users who are signed in to Google’s websites (e.g., youtube.com and google.com). Google may share personal data with its affiliates, other trusted companies, or individuals who may process this data based on Google’s instructions and in accordance with Google’s privacy policies. Further information can be found in YouTube’s Privacy Policy and in the Legal Notice.
DigiAccess (Accessibility): On our websites, we use “DigiAccess,” a digital accessibility tool, to ensure that our content is accessible to all users. DigiAccess analyzes the website and enables adjustments such as text enlargement, color changes, contrast adjustments, keyboard navigation, and other features to improve accessibility.
When using DigiAccess, personal data is generally not processed. However, depending on the selected settings, information regarding the accessibility adjustments made by the user may be stored locally on the end device (e.g., via cookies or comparable technologies such as local storage). This information is used exclusively to save the selected settings for future visits.
Storage takes place, to the extent technically necessary, on the basis of Section 25(2) of the TDDDG. Further processing is based on Article 6(1)(f) of the GDPR (legitimate interest), as we have an interest in ensuring that our website is accessible and user-friendly.
The use of DigiAccess is voluntary and can be deactivated or adjusted at any time via the corresponding settings on our website.
The provider of DigiAccess acts as a data processor on our behalf. A data processing agreement has been concluded in accordance with Article 28 of the GDPR. Further information can be found in DigiAccess’s privacy policy and in the legal notice.

Statistical cookies: Statistical cookies allow us to track visits to our websites, analyze the sources of traffic, and thereby measure and optimize the performance of our websites.

Google Analytics: Google Analytics generates detailed statistics on user behavior on the website to provide analytical insights. To do this, a user’s IP address and metadata must be processed, which can be used to determine a user’s country, city, and language. Cookies or cookie-like technologies may be stored and read. These may contain personal data and technical data, such as the user ID, which can provide the following additional information:
- Time-related information about when and for how long a user has visited or is currently visiting the various pages of the website
- Device category (desktop, mobile phone, and tablet), platform (web, iOS app, or Android app), browser, and screen resolution used by a user
- where a user came from (e.g., referring website, search engine—including the search term—social media platform, newsletter, organic video, paid search, or campaign)
- whether a user belongs to a target group or not
- what a user did on the website and what events were triggered by the user’s actions (e.g., page views, user engagement, scrolling behavior, clicks, payment information added, and custom events such as e-commerce tracking)
- Conversions (e.g., whether a user made a purchase and what was purchased)
- Gender, age, and interests, if such information is available

This data may also be used by Google to track the websites you visit and to improve Google’s services. They may be linked across multiple domains operated by this website operator to other Google products (e.g., Google AdSense, Google Ads, BigQuery, Google Play) that the website operator uses. Google may also link this data to data from users who are signed in to Google’s websites (e.g., google.com). Google shares personal data with its affiliates and other trusted companies or individuals who process this data on Google’s behalf and in accordance with Google’s privacy policies. It may also be used for profiling by the website operator and Google, for example, to offer a user personalized services, such as ads based on a user’s interests or recommendations. For more information, see the The provider’s privacy policy, as well as in the See the legal notice.

Marketing Cookies: Marketing cookies enable our advertising partners to show you ads on other websites that are based on your interests. This is done by uniquely identifying your browser or device.

c) Use of the “Real Cookie Banner” consent tool

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies we use, as well as the associated consents.
This tool enables us to obtain and document consent from our website visitors in a legally compliant manner. Each visitor is assigned a pseudonymous identifier (UUID) to store their consent decision.
As part of our documentation requirements, we store not only the selected cookie settings but also technical information (e.g., the time of consent or user interactions).

Legal Basis:

Art. 6(1)(c) of the GDPR → Compliance with legal obligations regarding the management of consent
Art. 6(1)(f) of the GDPR → Our legitimate interest lies in the legally compliant documentation and management of cookies and similar technologies.

Providing your personal data is not required by law or contract, nor is it necessary for entering into a contract.
You are not obligated to provide your personal data. However, without processing your data, we cannot manage your consents and may not be able to provide certain website features.
For more information, please see Real Cookie Banner’s Privacy Policy at: https://devowl.io/de/rcb/datenverarbeitung/

Section III. Special Uses (Additional Features/Services) of Our Website

i) In addition to the purely informational use of our website (see Section II), we offer various other services and features that you may use if you are interested. To do so, you will generally need to provide additional personal data, which we require and use to provide the respective service and to which the aforementioned data processing principles also apply.
(ii) In some cases, we use external service providers to process your data. We have carefully selected and engaged these providers; they are bound by our instructions and are regularly monitored.
iii) In addition, we may share your personal data with third parties if we offer contracts or similar services in collaboration with partners. You can find more detailed information about this when you provide your personal data or in the description of the respective offer below.
iv) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this in the description of the respective offer.

1. Contact via contact and order forms and by email

On our website, you will find contact forms that can be used to contact us electronically, to submit inquiries, and to request informational materials and brochures. When you use these forms or send us an email to contact us, the data you provide (such as last name and first name, address, email address, title, website, phone and fax numbers, as well as the reason for contacting us or any additional information) will be stored by us for the purpose of processing your inquiries.
The legal basis for processing the data, where the data subject has given consent, is Art. 6(1)(a) of the GDPR. The legal basis for processing data transmitted when sending an email or using the contact form is Article 6(1)(f) of the GDPR. If the email contact is intended to lead to the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Without your email address and name, we are generally unable to respond to your inquiry. All other information is voluntary. There are no negative consequences associated with not providing this data. However, in individual cases, failure to provide this information may, for example, make communication with you more difficult or cause delays.
We will delete the data collected in this context once storage is no longer necessary, or we will restrict processing if statutory retention obligations apply. For personal data entered in the contact form and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered concluded when it is evident from the circumstances that the matter in question has been definitively resolved. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

2. Consent to Receive Email Newsletters

i) With your consent, you can subscribe to our free newsletter, through which we’ll keep you informed about news and special offers from the Hotel St. Elisabeth.
ii) We use the so-called double opt-in procedure for newsletter sign-ups. This means that after you sign up, we will send an email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of your registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.
iii) Required information for receiving the newsletter includes your email address and the other data marked with an asterisk (*). Without this information, we cannot send you our newsletter. Providing additional information is voluntary. If you do not provide this information, you will not suffer any disadvantages as a result. After your confirmation, we will store your data for the purpose of sending you the newsletter. The legal basis for this is Art. 6(1)(a) of the GDPR.
iv) You may revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking the link provided in every newsletter email, via this form on the website, by emailing info@st-elisabeth-hegne.de, or by sending a message to the contact information listed in the legal notice. If you withdraw your consent, we will cease the corresponding data processing and delete the data you provided for this purpose, unless you have expressly consented to further use of your data or there is a legal basis for further processing.

3. Registration and Customer Account

You can register on our website—among other things, to book or reserve a room—by creating an account. In doing so, we will process the personal data you provide. Here, too, your personal data will only be disclosed if there is a legal basis for data processing, or if it is transferred to external service providers as part of contract processing in accordance with our instructions. The following data is collected as part of the registration process:

IP address, as well as the date and time of registration
Name and Email Address

The processing of your personal data is necessary for the performance of a contract or a pre-contractual measure. The legal basis is Article 6(1), first sentence, subparagraph (b) of the GDPR. Further processing in connection with the creation and use of your account may also be based on your consent. In these cases, the legal basis is Article 6(1)(a) of the GDPR. Your registration is necessary to fulfill the contract or to take a pre-contractual measure. Furthermore, it is also necessary for providing the content and services on our website. Data storage generally ends once the purpose has been fulfilled. If the collection and processing of your personal data is necessary for a pre-contractual measure or to fulfill the contract, the need to store the contractual partner’s personal data may continue in order to comply with contractual or legal obligations. For bookings made through your customer account, additional data may be required depending on the payment method. This data is determined by the selected payment method. As a user, you have the option to cancel your registration at any time. You may have the data stored about you modified at any time. If the data is necessary for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible to the extent that no contractual or legal obligations preclude such deletion.

4. Applications

If you apply to us online via our contact form, the data you provide (e.g., last name, first name, address information, contact information, date of birth, resume, certificates, qualifications, answers to questions, and, if applicable, any correspondence exchanged with you during the selection process) will be processed by us for the purpose of handling your application as part of the selection process and, potentially, for the establishment of an employment relationship with our company. The legal basis for this is Article 6(1), sentence 1, letter b, and Article 88 in conjunction with Section 26 of the new Federal Data Protection Act (BDSG). We will delete the personal data stored in connection with your application as soon as storage is no longer necessary, or we will restrict processing if statutory retention periods apply. Storage is no longer necessary if you are not hired. Your data will then be deleted regularly, no later than six months after the conclusion of the selection process. If you were not hired but your application remains of interest to us, we will ask for your consent to retain your application for future job openings. Only authorized employees involved in the respective selection process have access to your data. We may transfer your personal data to third parties provided there is a legal basis for the processing. In addition, we may share your data with external service providers as part of a data processing arrangement in which they act under our instructions (e.g., software providers or IT service providers, including for remote maintenance and support).

Section IV. Social Media

On our website, you’ll find various social media buttons for Facebook, Google+, Hotelstars, and Gastfreund. These buttons simply contain links. No data is transmitted to the respective social media providers during your visit to our site. Only when you click on one of the buttons will the corresponding page open in a separate window and you will be redirected.

Section V. Services and Tools Used

Privacy Policy Regarding the Use of the DigiAccess Accessibility Tool

Our website uses an accessibility tool to improve accessibility and user-friendliness. Users can use it to customize settings such as font size or contrast.
In doing so, technical data (e.g., IP address, browser information) may be processed, and functional cookies may be used to store the selected settings.
Processing is based on Section 6(1)(g) of the KDG and KDR-OG, and Article 6(1)(f) of the GDPR (legitimate interest in an accessible website).
For more information: https://www.digiaccess.org/datenschutzerklaerung

Privacy Policy Regarding the Use of Google Analytics (with Anonymization Feature)

Provided you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics uses cookies that enable us to analyze the use of our website. The information generated in this way is generally transmitted to Google’s servers and processed there.
We use Google Analytics with IP anonymization enabled. This means that your IP address is truncated within the EU or the EEA before it is transmitted.
Processing is carried out exclusively on the basis of your consent in accordance with Section 6(1)(b) of the KDG and KDR-OG and Article 6(1)(a) of the GDPR.
You can revoke your consent at any time via the cookie banner.
For more information, please visit:
https://www.google.de/intl/de/policies/privacy/
https://www.google.com/analytics/terms/de.html

Privacy Policy Regarding the Use of YouTube

Our website includes videos from YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited).
When you visit a page with an embedded video, a connection is established to YouTube’s servers. Personal data (e.g., IP address) may be transmitted in the process. If enabled, the video is embedded in enhanced privacy mode, which, according to YouTube, means that data is not stored until you actively play the video.
If you are logged into your Google or YouTube account, your usage behavior may be associated with your profile. Processing is based on your consent in accordance with Section 6(1)(b) of the KDG and KDR-OG and Article 6(1)(a) of the GDPR.
For more information, please visit: https://www.google.de/intl/de/policies/privacy/

Privacy Policy Regarding the Use of Ninja Forms (Contact Forms)

We use the Ninja Forms plugin to provide contact and registration forms.
When you submit a form, the data you enter (e.g., name, email address, phone number, message) is processed in order to handle your request.
The processing is carried out:
to implement pre-contractual measures (Section 6(1)(c) KDG and KDR-OG / Art. 6(1)(b) of the GDPR) or
based on our legitimate interest in processing inquiries (Section 6(1)(g) of the KDG and KDR-OG / Art. 6(1)(f) of the GDPR)
The data will be deleted as soon as it is no longer necessary for the intended purpose and there are no statutory retention requirements.

Privacy Policy Regarding the Use of hCaptcha (Spam and Bot Protection)

To protect our forms from automated submissions, we use hCaptcha (Intuition Machines, Inc.).
hCaptcha analyzes the behavior of website visitors based on various characteristics (e.g., IP address, mouse movements, time spent on the site) to distinguish between human users and bots.
Data processing is based on Section 6(1)(g) of the KDG and KDR-OG, and Article 6(1)(f) of the GDPR (legitimate interest in the security of our website).
For more information, please see hCaptcha’s Privacy Policy: https://www.hcaptcha.com/privacy

Transfers to Third Countries (U.S.)

When using certain services (e.g., Google or YouTube), personal data may be transferred to countries outside the EU or the EEA.
These countries may not have a level of data protection comparable to that of the EU. In particular, there is a risk that government agencies may gain access to the data.
The transfer takes place exclusively:
based on your consent or
based on appropriate safeguards in accordance with Art. 46 of the GDPR (e.g., standard contractual clauses)
Where necessary, we take additional measures to protect your data.

This Privacy Policy is reviewed regularly and updated as needed to comply with current legal requirements and to provide a transparent overview of our services.

As of August 11, 2026