Privacy policy

2. Website: Processing of your personal data
The use of this website (https://amf-bruns-freizeitmobile.de/) requires the processing of personal data to the extent described in section 2.1. In addition, personal data is processed in the cases described in section 2.2. ff.

2.1 Data processing to enable website use
When you visit our website, we collect personal data to enable you to use it (usage data). This includes your IP address and data about the start, end and purpose of your use of the website as well as any identification data (e.g. your login data if you log into a secure area). It also includes the technical data transmitted by your browser, such as browser type / browser version, the previously visited website (referrer URL), monitor resolution, operating system, device information (e.g. device type), etc., if applicable. We process this data for the provision and needs-based design of this website in our legitimate interest (Art. 6 para. 1 lit. f GDPR). If you would like detailed information on the balancing of interests, please contact one of the persons named under point 1.

2.2 Newsletter and e-mail advertising
If you would like to receive our newsletter and register for it, we will collect your e-mail address and send you a confirmation e-mail with a confirmation link that you must click on to subscribe to our newsletter. In addition, if you purchase goods or services from us, we will add you to our mailing list in order to send you e-mail advertising for our own similar goods or services, provided you have not objected to this use of your e-mail address. You can unsubscribe from the newsletter at any time and object to the e-mail advertising at any time. You will find an opportunity to declare your objection in every newsletter and every other advertising e-mail that we send you.

2.3. Accesses and storage on your end device (“cookies”)
We use tracking technologies on our website that enable us or our contractual partners or service providers to collect data relating to the use of our website. These tracking technologies are usually referred to as cookies, which is why we also use this term below. However, the following explanations also apply accordingly to other tracking technologies or file formats, such as local storage, pixels, beacons or tags. Cookies are text files that are stored in the browser on your end device. User-related pseudonymous data can be stored for these files. This data can then be read out in turn. When you visit our https://amf-bruns-freizeitmobile.de/ website for the first time, we display a cookie consent banner to inform you about the tracking technologies we use and to give you the choice of which optional cookies you would like to consent to. You can change your selection at any time in the data protection preference center on our website (see (iv) below).

I. Technically necessary cookies
In certain cases, the storage of information on your end device or access to information already stored on your end device is absolutely necessary so that we can make our website available to you for use (“necessary cookies”). In these cases, your device is accessed on the basis of Section 25(2)(2) TTDSG. Insofar as this information has a personal reference and is further processed by us in our IT systems, the legal basis for this data processing is our legitimate interest in providing our website and ensuring data security, Art. 6 para. 1 letter f GDPR.

II. Cookies requiring consent
We only use technically non-essential cookies with your consent. We use the following categories of cookies that require consent:

• • Performance cookies: These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. They help us answer questions about which pages are the most popular, which are the least used and how visitors move around the site. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our website.
  • Functional cookies: These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we use on our pages. If you do not allow these cookies, some or all of these services may not function properly.
  • Cookies for marketing purposes: These cookies may be set through our website by our advertising partners. They may be used by these companies to build a profile of your interests and show you relevant ads on other websites. They do not directly store personal data, but are based on a unique identification of your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

You can find more information about the file names, storage duration, provider and category of the respective cookie in the cookie settings of the cookie consent banner or the data protection preference center of the respective website.

By clicking on the respective button (e.g. “Accept all cookies” or “Confirm selection”) in the cookie consent banner or the data protection preference center, you consent both to the storage and reading of information in these optional cookies (§ 25 para. 1 TTDSG) via our respective website and to the further processing of any personal data read out (Art. 6 para. 1 letter a DSGVO).

III. Consent to transfer to third countries
We also use cookies on this website from third-party providers that are based in third countries outside the European Union (EU) and the European Economic Area (EEA) or use servers in such third countries. The level of data protection in such third countries is generally not comparable with that of the EU. This applies in particular to the USA, where data can be accessed by surveillance authorities without cause and, if you are not a citizen of the USA, you currently have only very limited legal remedies against any access to your data. Such government access may not be effectively prevented even by additional agreements between us and the respective third-party provider. Although the EU Commission and the US government announced a “Trans-Atlantic Data Privacy Framework” in March 2022 as a new mechanism for US data transfers, which is intended to provide EU citizens with additional legal remedies, this framework is not expected to be implemented until the end of 2022. Therefore, in our cookie consent banner or the data protection preference center on our website, we also obtain your consent to such third country data transfers (Art. 49 para. 1 lit. a GDPR).

Therefore, when deciding which cookies you wish to consent to, please bear in mind that by consenting to the setting of the cookies in question, you are also consenting to any associated transfer of your personal data to insecure third countries.

You can find out which third-party providers and cookies this applies to in detail in the cookie settings of the cookie consent banner or the data protection preference center of the respective website.

IV. Revocation of your consent
You can revoke your consent given in the cookie consent banner at any time for the future (Art. 7 para. 3 GDPR). To do this, go to the Data Protection Preference Center on our website. You can access the Privacy Preference Center by clicking on the “Cookie Settings” link in the bottom left-hand corner of our website. In the Data Protection Preference Center, you have the option of revoking consent you have already given by deselecting the relevant cookies and giving new consent. You can also select additional cookies there and give us further consent.

Your selection of optional cookies will in turn be stored in your browser as a cookie from our cookie consent management provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg.

2.4. Use of Google services
We use several services of the US provider Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on https://amf-bruns-freizeitmobile.de/. If you consent to the setting of the corresponding cookies by Google in our cookie consent banner or the data protection preference center of our website, Google collects certain personal data from you. This is done by storing cookies with a pseudonymous user ID assigned by Google in your browser. The data collected by Google Analytics is also stored on Google servers in the USA. We have activated the “IP anonymization” function on our website. This means that your IP address is truncated by Google within member states of the EU or the EEA before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted as part of the use of the Google services listed below will not be merged with other Google data. Nevertheless, you should take into account when making your decision that the protective measures taken by Google are not sufficient, at least in the opinion of various European data protection authorities, to effectively prevent possible access to your usage data by the US authorities. The legal basis for the use of Google services is your consent in accordance with Art. 6 para. 1 letter a GDPR, § 25 para. 1 TTDSG. (see section 2.b.ii.).

When deciding whether you wish to consent to our use of Google cookies, please note that by consenting to the setting of the relevant cookies, you also consent to any associated transfer of your personal data to the USA.

You can access Google’s privacy policy here.

I. Google Analytics in particular
If you consent to the setting of the Google Analytics cookie in our cookie consent banner or the data protection preference center on our website, Google will collect data relating to your use of our website. This allows Google to assign data relating to the usage behavior on our website to this respective pseudonymous user. We have commissioned Google to use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage.

II. In particular Google Ads, Google Ads Remarketing
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when you enter certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). We can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our ads and how many ads led to corresponding clicks.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting). Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC). If you have a Google account, you can object to personalized advertising here.

III. Google Conversion Tracking
With the help of Google conversion tracking through the Google Tag Manager, Google and we can recognize whether users have performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our ads and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

IV. Google Maps
We use Google Maps in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website.

V. Google Fonts & Font Awesome (local hosting)
We use so-called fonts from Google (Google Fonts) and Fonticons Inc (Font Awesome) on our website for the uniform display of fonts. The fonts of both providers are hosted locally by us. When you visit our website, there is therefore no connection to Google and Fonticons servers in the USA.

Further information on Google Fonts can be found here and in Google’s privacy policy: Accessible here.

Further information about Font Awesome can be found in the Font Awesome privacy policy: Accessible here.

2.5. Use of a content delivery network (Cloudflare)
We use the “Cloudflare” service. The provider is Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”). Cloudflare offers a globally distributed content delivery network with DNS. The information transfer between your browser and our website is technically routed via the Cloudflare network. This enables Cloudflare to analyze the data traffic between your browser and our website and to serve as a filter between our servers and potentially malicious data traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here. The use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 letter f GDPR), as well as on your consent in accordance with Art. 6 para. 1 letter a GDPR, § 25 para. 1 TTDSG with regard to the cookies set. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here. Further information on security and data protection at Cloudflare can be found here.

2.6. reCAPTCHA
We also use the captcha technology “reCaptcha v3” from Google. For the European area, the subsidiary company, Google Ireland Limited (Gordon House, Barrow Street Dubling 4, Ireland) is responsible for all Google services. By using reCaptcha v3, it is possible to distinguish whether data entries on our websites were made by a human or automatically created by programs. For this purpose, Google analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website and runs completely in the background. For the analysis, Google evaluates various information from which a personal reference to the respective website visitor can be established (IP address, the behavior of the website visitor, information about the operating system, browser and length of stay, display instructions and scripts, the input behavior of the website visitor and mouse movements). The data collected during the analysis is also transferred to Google servers located in the USA and stored there.

Data processing is carried out on the basis of Art. 6 para. 1 letter f GDPR, as we have a legitimate interest in protecting our websites from abusive and automated spying and from SPAM.

For more information about Google reCaptcha v3 and Google’s privacy policy, please see the following links: Google Privacy Policy and Google reCAPTCHA.

2.7. Social networks, embedded YouTube videos and meta pixels
Our website contains links to social networks (e.g. Facebook) and embedded videos from the streaming service YouTube. These services are operated exclusively by third-party providers. If you follow the links or play videos, information may be transmitted to these providers. We use the so-called “Shariff solution” from c’t for links to social networks. This means that when you visit our site, no personal data is passed on. Only if you click on one of the social share or video play buttons will data be transmitted to the respective provider. The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of the respective provider. You can find this here:

Meta Platforms (formerly Facebook Inc.), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Facebook/ Meta privacy policy: Accessible here.

YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA

Google privacy policy: Accessible here.

Use of the Meta Pixel (formerly Facebook Pixel)

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website. With the help of this pixel, we can track the behavior of visitors to our website after they have been redirected to our website by clicking on a Facebook or Instagram ad. This enables us to analyze and optimize the effectiveness of our Facebook and Instagram ads.

Processed data:

The following data may be collected through the integration of the Meta Pixel

• • Information about your activities on our website (e.g. pages visited, completed purchases)
  • Meta ID (a pseudonymous identifier to assign the data)
  • Browser information, IP address and information about the device used
  • Timestamp of the interaction

Legal basis

The meta pixel is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time via our [cookie management tool](insert link).

Data transfer to Meta

The data collected by the Meta Pixel may be processed by Meta Platforms Ireland Limited. Meta may combine this data with other information that Meta has stored about you (e.g. your Facebook or Instagram profile) and use it for its own advertising purposes. Meta acts as an independent controller in accordance with Art. 4 No. 7 GDPR. You can find more information about data processing by Meta in Meta’s data policy.

Data transfer to third countries

Meta may also transfer the collected data to the USA. Please note that there is currently no adequacy decision by the European Commission for the USA. This means that there is no level of data protection in the USA that is comparable to that of the EU. There is therefore a risk that US authorities could gain access to this data.

Deactivation of the meta pixel

You can prevent the collection by the meta pixel by objecting to its use in our [cookie management tool](insert link). Alternatively, you can deactivate personalized advertising in your Facebook or Instagram profile. You can find instructions here.

2.8. Contact form
We process your personal data when you use our contact form. If you contact us via the contact form provided, your details will be stored so that they can be used to process and respond to your inquiry. We would like to point out that data transmission over the Internet may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

The legal basis for this data processing is – depending on the subject of your inquiry – the permissibility of processing in the context of contract initiation, a contract or our legitimate interest in providing a contact form for general inquiries (Art. 6 para. 1 lit. b or f GDPR). You are neither obliged to contact us via the contact form nor to provide personal data. If you do not provide your personal data, we may not be able to process your request. Otherwise, there will be no consequences for you. If you would like detailed information on the balancing of interests, please contact one of the contacts listed under point 1.

3. Conclusion and execution of contracts
We process personal data concerning you in order to conclude or execute contracts with you (purchase contract).

4. Visit to our premises (video surveillance)
If you visit our premises, we monitor the outside area and the parking lot partly by video systems. These areas are marked by the following pictogram:

4.1 Legal basis
Art. 6 para. 1 lit. f GDPR and § 4 para. 1 no. 2, no. 3 BDSG.

4.2 Purpose and necessity of the processing of your personal data
The purpose pursued by us is the prevention, detection and investigation of criminal offenses, the safeguarding of domiciliary rights and the performance of traffic safety obligations. Our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR is the protection of our property as well as the property and physical integrity of all visitors and employees. If you would like detailed information on the balancing of interests, please contact one of the persons named under point 1.

We process this data in our legitimate interest to maintain the functions of our fan page, to check our reach and to design and display our fan page according to your interests. If you would like detailed information on the balancing of interests, please contact one of the addresses listed in section 1.

9.3 Further information on our joint responsibility with Facebook
In order to transparently and explicitly define the responsibilities for compliance with the obligations arising from the GDPR between AMF-Bruns Freizeitmobile and Facebook, we have entered into an agreement with Facebook which states that Facebook is primarily responsible for data processing when you visit our fan page. In particular, Facebook is responsible if you exercise your rights under Art. 12 and 13 GDPR, Art. 15 to 22 GDPR and for compliance with the obligations in Art. 32 to 34 GDPR.

You can also address your request regarding data processing in connection with our fan page to us at any time or exercise your rights by contacting the address stated in section 1 (further information on your rights can be found in section 14). We will forward your matter to Facebook if this is necessary for the execution of your request or the exercise of your rights.

Further information on Page Insight data and exercising your rights can be found here.

For more information on the determination of responsibilities within the joint controllership within the meaning of Art. 26 GDPR, see the agreement with Facebook: Accessible here.

For more information on the setting of cookies when visiting our fan page, see Facebook’s Cookie Policy.

For more information on protecting your privacy on Facebook, see Facebook’s privacy policy: Accessible here.

Further information on data protection at Instagram can be found here.

10. Our presence in social networks (LinkedIn)
We maintain an online presence within the social network “LinkedIn” in order to communicate with the users active there or to offer information about us there.

For a detailed description of the respective forms of processing by LinkedIn and the possibilities of objection, we refer to the data protection declarations and information provided by LinkedIn as the operator of the network. In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with LinkedIn as the provider, as only the provider has access to the user’s data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (LinkedIn). You can find LinkedIn’s privacy policy here. Information on the Privacy Shield (guaranteeing the level of data protection when processing data in the USA) can be found here; opt-out options can be found here.

The legal basis for the processing of your personal data is our legitimate interest in offering an online presence in a social network with corresponding functionalities in order to communicate with the users active there or to be able to offer information there, Art. 6 para. 1 lit. f GDPR. If you would like detailed information on the balancing of interests, please contact one of the persons named under point 1.

11. Transfer to recipients of personal data within the EEA
We only pass on the personal data described here insofar as this is necessary for the provision of our service or is required by law in this context. Within the scope of the purposes mentioned here, personal data is forwarded to service providers who work for us and support us in particular in the provision of services. In addition to their legal obligation to comply with all data protection regulations, these service providers are bound by further contractual data protection requirements. In particular, this includes an obligation as a processor in accordance with Art. 28 GDPR. In particular, we pass on personal data to the following categories of service providers:

In addition to the categories already mentioned, further categories of service providers may exist or be added at any time.

Otherwise, we only transfer personal data to other recipients if we have legal permission to do so or if you have given your prior consent. You can revoke any consent you have given at any time with effect for the future. We only pass on your data to government agencies within the scope of legal obligations or on the basis of an official order or court decision and only insofar as this is permitted under data protection law.

12. Transfer to recipients of personal data in countries outside the EEA
If necessary for our purposes, we may also transfer your data to recipients outside the EU. This is particularly the case if we have to transfer this data to recipients in countries within the scope of contract processing or due to legal regulations. Otherwise, we only transfer data to third countries if it is ensured that the recipient of the data has implemented an adequate level of data protection within the meaning of Art. 45 GDPR or suitable guarantees within the meaning of Art. 46 (2) and (3) GDPR and no other interests worthy of protection speak against the transfer of data. To ensure an adequate level of protection at the recipient of the data, we use in particular the standard contractual clauses of the EU Commission for the transfer of personal data to third countries, unless an adequacy decision within the meaning of Art. 45 para. 1 GDPR has been issued by the EU Commission. In particular, we pass on personal data to the following categories of service providers:

In addition to the categories already mentioned, further categories of service providers may exist or be added at any time.

13. Deletion
We delete your personal data as soon as it is no longer required for the aforementioned purposes of processing, in the event of an objection there are no compelling legitimate grounds for AMF-Bruns Freizeitmobile to the contrary or in the event of a revocation there is no other legal basis for the processing. In certain cases, e.g. if there is a statutory retention obligation, your personal data will initially be blocked and deleted upon expiry of the retention period.

Video surveillance recordings are generally deleted after a period of 72 hours at the latest. In justified individual cases, in particular for criminal investigations or the preservation of evidence, recordings are kept for longer and deleted once this purpose has been fulfilled.

Job-related data will be stored until a decision is made and then deleted after six months at the latest or, in the event of a successful application, transferred to your personnel file.

14. Your rights
As a data subject affected by data processing, you have the following rights:

In addition, in the case of processing on the basis of Art. 6 para. 1 lit. e or f GDPR, you can object to the processing (Art. 21 GDPR), whereby you must provide a special reason, except in the case of direct advertising. If you have provided this data, you can request the transfer of the data (Art. 20 GDPR). Whether and to what extent these rights exist in individual cases and under what conditions they apply is laid down by law in the aforementioned standards. If the processing is based on consent within the meaning of Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you can revoke this consent at any time for the future (Art. 7 para. 3 GDPR). You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR).

If you have any questions or complaints about data protection at Smarttourer, we recommend that you first contact our data protection officer (see the contact details in section 1).