Generally
As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that reveals something about you and with which you can be identified. In this privacy policy, we would like to explain to you how, for what purpose, and on what legal basis we process your data.
The following entity is responsible for data processing on this website and within our company:
Landhaus Langeck GmbH
Langeck 6
79244 Münstertal
Telephone: +49 (0) 3521 7288860
Email: post@faehrhaus-meissen.de
General information
SSL or TLS encryption
When you enter your data on websites, place online orders, or send emails over the internet, you must always assume that unauthorized third parties may access your data. Complete protection against such access is impossible. However, we make every effort to protect your data as best as possible and to close security gaps wherever possible.
An important security mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon before the entered web address in your browser and by the fact that our web address begins with https:// and not with http://.
How long do we store your data?
In some sections of this privacy policy, we inform you about how long we, or the companies that process your data on our behalf, store your data. If no such information is provided, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you withdraw your consent to the data processing.
In the event of an objection or revocation, we may continue to process your data if at least one of the following conditions is met:
- We have compelling legitimate grounds for continuing the data processing which override your interests, rights and freedoms (only in case of objection to the data processing; if the objection is directed against direct marketing, we cannot provide compelling legitimate grounds).
- Data processing is necessary to establish, exercise or defend legal claims (this does not apply if your objection is directed against direct marketing).
- We are legally obligated to retain your data.
In this case, we will delete your data as soon as the requirement(s) no longer apply.
Data transfer to the USA
We also use tools on our website from companies that transfer your data to the USA, where it is stored and may be further processed. The European Commission has adopted an adequacy decision for the EU-US data protection framework. This decision establishes that the USA ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and safeguards regarding US intelligence agencies' access to data. Binding safeguards have been introduced to limit US intelligence agencies' access to what is necessary and proportionate to protect national security. Furthermore, enhanced oversight of the activities of US intelligence agencies has been established to ensure compliance with restrictions on surveillance activities. An independent judicial remedy has also been set up to address and resolve complaints from European citizens regarding access to their data. The EU-US data protection framework thus allows European companies to transfer data to certified US companies without having to implement additional data protection safeguards. A list of all certified companies can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search
A change in the European Commission's decision cannot be ruled out.
Your rights
Objection to data processing
If you read in this privacy policy that we have legitimate interests in processing your data and therefore base this processing on Article 6(1)(f) GDPR, you have the right to object to this processing pursuant to Article 21 GDPR. This also applies to profiling carried out on the basis of the aforementioned provision. The prerequisite is that you provide reasons for the objection arising from your particular situation. No justification is required if the objection relates to the use of your data for direct marketing purposes.
The consequence of your objection is that we are no longer permitted to process your data. This does not apply if one of the following conditions is met:
- WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGHT YOUR INTERESTS, RIGHTS AND FREEDOMS.
- The processing serves the purpose of establishing, exercising or defending legal claims.
THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS AGAINST DIRECT MARKETING OR PROFILING CONNECTED WITH IT.
Further rights
Revocation of your consent to data processing
Many data processing operations are based on your consent. You give this consent, for example, by ticking the appropriate box in online forms before submitting them, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7 para. 3 GDPR). From the moment of withdrawal, we are no longer permitted to process your data. The only exception is if we are legally obligated to retain the data for a certain period of time. Such retention periods exist, in particular, under tax and commercial law.
Right to lodge a complaint with the competent supervisory authority
If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. You can contact a supervisory authority in the Member State of your habitual residence, your place of work, or the place where the alleged infringement took place. This right to lodge a complaint exists alongside any administrative or judicial remedies.
Right to data portability
Data that we process automatically based on your consent or in fulfillment of a contract must be provided to you or a third party in a commonly used, machine-readable format upon your request. We can only transfer the data to another controller if this is technically feasible.
Right to data access, erasure and rectification
According to Article 15 of the GDPR, you have the right to obtain information free of charge about which personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Article 16 GDPR), and under the conditions of Article 17 GDPR, you may request that we delete the data.
Right to restriction of processing
In certain situations, you can request, pursuant to Article 18 of the GDPR, that we restrict the processing of your data. Apart from storage, the data may then only be processed as follows:
- with your consent
- for the establishment, exercise or defense of legal claims
- to protect the rights of another natural or legal person
- for reasons of important public interest of the European Union or of a Member State
The right to restrict processing exists in the following situations:
- You have disputed the accuracy of your personal data stored with us, and we need time to verify this. You have the right to retain this data for the duration of the verification process.
- Your personal data is being processed unlawfully or was processed unlawfully in the past. In this case, you have the right to have your data deleted as an alternative to having it processed unlawfully.
- We no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims. In this case, you have the right to have the data deleted as an alternative to its processing.
- You have objected to the processing of your personal data pursuant to Article 21(1) GDPR, and now your interests and ours must be weighed against each other. This right to object exists until the outcome of this balancing process is determined.
Hosting and Content Delivery Networks (CDN)
External hosting
Our website is hosted on a server of the following internet service provider (host):
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
How do we process your data?
The hosting provider stores all data from our website. This includes all personal data that is collected automatically or through your input. This may include, in particular: your IP address, pages visited, names, contact details and inquiries, as well as metadata and communication data. Our hosting provider adheres to our instructions when processing this data and only processes it to the extent necessary to fulfill its contractual obligations to us.
On what legal basis do we process your data?
Since we use our website to reach potential customers and maintain contact with existing customers, the data processing by our hosting provider serves the purpose of initiating and fulfilling contracts and is therefore based on Article 6(1)(b) GDPR. Furthermore, it is in our legitimate interest as a company to provide a professional online presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Article 6(1)(f) GDPR.
Data collection on this website
Server log files
Server log files record all requests and accesses to our website and capture error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so we cannot associate the data with you personally. The data is automatically transmitted from your browser to our provider.
How do we process your data?
Our provider stores server log files to track activity on our website and identify errors. These files contain the following data:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address (possibly anonymized)
We do not combine this data with other data, but only use it for statistical analysis and to improve our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our website functions correctly. It is also our legitimate interest to obtain an anonymized overview of website visits. Therefore, the data processing is lawful pursuant to Article 6(1)(f) GDPR.
Contact form
You can send us a message via the contact form on this website.
How do we process your data?
We store your message and the information from the form in order to process your request, including any follow-up questions. This also applies to the contact details you provide. We will not share this data with anyone else without your consent.
How long do we store your data?
We will delete your data as soon as one of the following occurs:
- Your request has been processed.
- They are requesting that we delete the data.
- You are withdrawing your consent to the storage of your data.
This does not apply if we are legally obligated to retain the data.
On what legal basis do we process your data?
If your inquiry relates to our contractual relationship or serves the purpose of carrying out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, it is in our legitimate interest to process inquiries addressed to us effectively. The legal basis for data processing is therefore Article 6(1)(f) GDPR. If you have consented to the storage of your data, the legal basis is Article 6(1)(a) GDPR. In this case, you can withdraw your consent at any time with effect for the future.
Inquiries via email, telephone or fax
You can send us a message by email or fax, or you can call us.
How do we process your data?
We store your message and the contact information you provide, including your phone number, in order to process your request and any follow-up questions. We will not share this data with anyone else without your consent.
How long do we store your data?
We will delete your data as soon as one of the following occurs:
- Your request has been processed.
- They are requesting that we delete the data.
- You are withdrawing your consent to the storage of your data.
This does not apply if we are legally obligated to retain the data.
On what legal basis do we process your data?
If your inquiry relates to our contractual relationship or serves the purpose of carrying out pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. In all other cases, it is in our legitimate interest to process inquiries addressed to us effectively. The legal basis for data processing is therefore Article 6(1)(f) GDPR. If you have consented to the storage of your data, the legal basis is Article 6(1)(a) GDPR. In this case, you can withdraw your consent at any time with effect for the future.
Plugins and Tools
Google Fonts (local hosting)
We use fonts from the US company Google on our website. We have installed these fonts locally, so no connection to Google's servers is established when you visit our website.
You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Font Awesome (local hosting)
We use icons from the Font Awesome icon library on our website. This library is offered by Fonticons Inc. We have installed the icons locally, so no connection to the company's servers is established when you visit our website.
Further information about Font Awesome can be found at https://fontawesome.com/ and specifically in the privacy policy: https://fontawesome.com/privacy.
Google Maps
What is Google Maps?
Map service provided by Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find more information about data protection at Google?
https://policies.google.com/privacy?hl=de
On what basis do we transfer your data to the USA?
Based on the European Commission's adequacy decision and the company's corresponding certification.
How do we process your data?
We use Google Maps on our website. To enable you to use all the functions of the map service, Google stores your IP address on one of its servers in the USA.
On what legal basis do we process your data?
The maps from Google Maps make it easier for visitors to find the locations listed on our website. As a company, we have a legitimate interest in this. The data processing is therefore lawful according to Art. 6 para. 1 lit. f) GDPR.
If you have consented to data processing, we will process your data exclusively on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time. From the moment of withdrawal, we may no longer process your data.
OpenStreetMap
What is OpenStreetMap?
Map service of the OpenStreetMap Foundation
Who processes your data?
OpenStreetMap Foundation (OSMF), Cowley Road, St John's Innovation Centre, Cambridge CB4 0WS, United Kingdom
Where can you find more information about data protection at OpenStreetMap?
https://wiki.osmfoundation.org/wiki/Privacy_Policy
How do we process your data?
We use maps from the OpenStreetMap Foundation on our website. This means that when you visit our website, your IP address and information about your browsing behavior are transmitted to and stored by the foundation. For this purpose, the foundation places cookies on your device or uses similar tracking technologies. If you have allowed location services in your device settings, OpenStreetMap will also store this data.
On what legal basis do we process your data?
The maps from OpenStreetMap make it easier for visitors to find the locations listed on our website. As a company, we have a legitimate interest in this. Therefore, the data processing is lawful according to Art. 6 para. 1 lit. f) GDPR.
If you have consented to data processing, we will process your data exclusively on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time. From the moment of withdrawal, we may no longer process your data.
Google reCAPTCHA
What is Google reCAPTCHA?
Test tool for distinguishing between humans and computers from Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find more information about data protection at Google?
https://policies.google.com/privacy?hl=de
On what basis do we transfer your data to the USA?
Based on the European Commission's adequacy decision and the company's corresponding certification.
How do we process your data?
We use Google reCAPTCHA to verify whether data entered into forms on our website comes from a human or a computer. This means that the testing tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis doesn't begin only when you use the testing tool, but as soon as you access our website. Various data points are collected, such as your IP address, the duration of your visit, and mouse movements. This data is then forwarded to Google.
On what legal basis do we process your data?
As a company, we have a legitimate interest in protecting our website from spam and unauthorized access. Therefore, data processing is lawful under Article 6(1)(f) GDPR.
If you have consented to data processing, we will process your data exclusively on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time. From the moment of withdrawal, we may no longer process your data.
eCommerce
Customer and contract data
How do we process your data?
When we enter into a contract with you, we require certain personal data from you. We collect, process, and use this data only to the extent necessary to establish, define, or modify our contractual relationship. If you can only access our services via our website, or if the services are billed through the website, we also collect usage data, provided this is necessary to enable you to use our services or to bill for the services used.
How long do we store your data?
We store your data until our legal relationship ends, unless we are legally obliged to keep the data for a longer period.
On what legal basis do we process your data?
We store your data in order to fulfill the contract with you or to carry out pre-contractual measures. The legal basis for this data processing is therefore Article 6(1)(b) GDPR.
Data processing on social media
What is social media?
By social media, we mean the social networks on which we have created publicly accessible profiles. You can read more about which specific social networks these are below.
Who processes your data?
The respective operating companies of the social networks. You can find the individual operators further down under the respective networks.
How is your data processed?
Social network operators are generally able to collect and analyze comprehensive data about the behavior of visitors and users of their networks. It is not possible for us to track all data processing activities on the social networks we use, which is why the operators of these networks may carry out additional processing activities not listed here. You can find further information in the terms of service and privacy policies of the respective social networks.
Your data may be processed when you visit the website of the social network or our profile page there. Even if you simply access a website that uses certain network content, such as Like or Share buttons, data may already be transferred to the social network operators. If you are a user of the social network and logged into your account, the operator of the social network can associate your visit to our profile page with your account. Even if you do not have a user account or are not logged in, the network operator may still collect your personal data, for example, by recording your IP address or setting cookies. With this data, the operators can create user profiles tailored to your behavior and interests and display interest-based advertising to you both within and outside the network. If you are a registered user of the network, interest-based advertising may also be displayed on all devices on which you are or have been logged in.
On what legal basis is your data processed?
Our social media profiles are intended to ensure the broadest possible online presence for our company. As a company, we have a legitimate interest in this. Therefore, the data processing is lawful pursuant to Article 6(1)(f) GDPR.
The data processing and analysis carried out by the operators of the social networks themselves may be based on other legal grounds. These must be specified by the operators of the social networks.
Who is responsible for processing your data and how can you exercise your rights?
When you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered by this visit. You can generally assert your rights against both us and the operator of the respective network.
Despite the joint responsibility with the operators of the social networks, our influence on the data processing operations of the respective operator is limited and is primarily governed by the operator's specifications.
How long will your data be stored?
When we collect data about your social media profiles, this data is deleted from our systems as soon as the purpose for its storage no longer applies, you request its deletion, or you withdraw your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular, retention periods – remain unaffected.
We have no control over how long social network operators store your data, which they collect for their own purposes. You can obtain information about this directly from the operator of the respective social network, for example, in their privacy policy.
Which social media platforms do we use?
What is Facebook?
A social network
Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Will your data be transferred to third countries?
Yes, to the USA and also to other third countries
Where can you find more information about data protection at Facebook?
https://www.facebook.com/about/privacy/
Where can you, as a Facebook user, adjust your advertising settings?
As a registered Facebook user, you can adjust your advertising settings in your user account. To do this, click on the following link and log in:
https://www.facebook.com/settings?tab=ads.
What is Twitter?
A social network in the form of a microblogging platform
Who processes your data?
Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Will your data be transferred to third countries?
Yes, to the USA
Where can you find more information about data protection at Twitter?
https://twitter.com/de/privacy
Where can you, as a Twitter user, adjust your advertising settings?
As a registered Twitter user, you can adjust your privacy settings in your user account. To do this, click on the following link and log in:
https://twitter.com/personalization.
What is Instagram?
A social network specializing in photos and videos
Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Will your data be transferred to third countries?
Yes
Where can you find more information about data protection at Instagram?
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen
Where can you, as a user, adjust your privacy settings?
As a registered Instagram user, you can adjust your privacy settings in your user account. To do this, click on the following link and log in:
https://www.instagram.com/accounts/privacy_and_security/
What is LinkedIn?
A social network for business contacts
Who processes your data?
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Will your data be transferred to third countries?
Yes
Where can you find more information about data protection at LinkedIn?
https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
Where can you, as a user, adjust your privacy settings?
As a registered LinkedIn user, you can adjust your privacy settings in your user account. To do this, click on the following link and log in:
https://www.linkedin.com/psettings/
What is Xing?
A social network for professional contacts
Who processes your data?
New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Will your data be transferred to third countries?
Yes, for the performance of the contract with Xing, if you have given your consent, if it is necessary for the establishment, exercise or defense of legal claims, or if there is an adequacy decision pursuant to Art. 45 GDPR or suitable safeguards pursuant to Art. 46 GDPR.
Where can you find more information about data protection at Xing?
https://privacy.xing.com/de/datenschutzerklaerung/druckversion
Where can you, as a user, adjust your privacy settings?
As a registered Xing user, you can adjust your privacy settings in your user account. To do this, click on the following link and log in:
https://www.xing.com/settings/privacy