Privacy Policy
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below this text.
Data Collection on this Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the contact details of the operator in the section "Note on the Responsible Party" in this privacy policy.
How do we collect your data?
Your data is collected in part when you provide it to us. For example, this may include data that you enter into a contact form.
Other data is automatically or with your consent collected by our IT systems when you visit the website. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to request information free of charge at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
For this purpose, as well as for any other questions regarding data protection, you can contact us at any time.
Analysis Tools and Third-Party Tools
When visiting this website, your surfing behavior may be statistically analyzed. This is primarily done with so-called analysis programs.
For detailed information on these analysis programs, please refer to the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter referred to as "Strato"). When you visit our website, Strato collects various log files, including your IP addresses.
For more information, please refer to Strato's privacy policy: https://www.strato.de/datenschutz/.
The use of Strato is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been requested, processing is carried out solely on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) as defined by the TTDSG. Consent can be revoked at any time.
Order Processing
We have concluded an order processing agreement (AVV) for the use of the aforementioned service. This is a data protection law-required contract that ensures that the provider processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this is done.
We point out that data transmission over the internet (e.g., communication by email) may have security gaps. A complete protection of the data from third-party access is not possible.
Note on the Responsible Party
The responsible party for the data processing on this website is:
Rolf Weinhold
Steanaker 363
27498 Helgoland
Telefon: 0162 7197 431
E-Mail: info@sellebrunn-helgoland.de
COMPANY DATA
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
Unless a more specific storage duration is specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons to store your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons cease to apply.
General Information on the Legal Bases for Data Processing on this Website
If you have given your consent to data processing, we process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 Para. 1 GDPR. In the case of explicit consent for the transfer of personal data to third countries, data processing also occurs on the basis of Art. 49 Para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally carried out based on § 25 Para. 1 TTDSG. Consent can be revoked at any time. If your data is required for the fulfillment of a contract or for pre-contractual measures, we process your data based on Art. 6 Para. 1 lit. b GDPR. We also process your data if required for the fulfillment of a legal obligation based on Art. 6 Para. 1 lit. c GDPR. Furthermore, data processing may occur based on our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. The specific legal bases for data processing in each case will be outlined in the following sections of this privacy policy.
Note on Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other data protectionally insecure third countries. When these tools are active, your personal data may be transferred to these third countries and processed there. We point out that in these countries, no data protection comparable to that of the EU can be guaranteed. For example, US companies are obligated to release personal data to security agencies without you, as the data subject, being able to take legal action against it. It cannot be excluded that US authorities (e.g., intelligence services) may process, evaluate, and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.
Revocation of Your Consent to Data Processing
Many data processing activities are only possible with your express consent. You can revoke any consent you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases and Against Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RELEVANT LEGAL BASIS FOR THE PROCESSING IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 PARA. 2 GDPR).
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement. The right to complain is without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to request that data we process based on your consent or in the performance of a contract be provided to you or a third party in a structured, commonly used, and machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.
Access, Correction, and Deletion
You have the right, under the applicable legal provisions, to request free access to your stored personal data at any time, including information about its origin, recipients, and the purpose of the data processing, as well as the right to correct or delete this data. For this purpose, and for any other questions regarding personal data, you can contact us at any time.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing your personal data.
- If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.
- If you have filed an objection under Art. 21 Para. 1 GDPR, a balancing of interests must be carried out between your and our interests. While it is still unclear whose interests outweigh, you have the right to request the restriction of processing your personal data.
If the processing of your personal data is restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the change in the address bar of the browser from "http://" to "https://" and the lock symbol in your browser's address bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to Advertising Emails
The use of contact data published as part of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the sites expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
4. Data Collection on This Website
Cookies
Our website uses so-called "cookies." Cookies are small data packets that do not harm your device. They are either stored temporarily for the duration of your session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after you finish your visit. Persistent cookies remain on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies can come from us (first-party cookies) or from third parties (so-called third-party cookies). Third-party cookies allow the integration of certain services from external companies into the website (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website features would not work without them (e.g., shopping cart functions or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies required for the execution of electronic communication processes, for providing certain functions you desire (e.g., shopping cart functionality), or for optimizing the website (e.g., cookies for measuring web traffic) are stored based on Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of their services. If consent is requested for the storage of cookies or similar recognition technologies, the processing occurs solely on the basis of this consent (Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG); consent can be withdrawn at any time.
You can configure your browser to be notified about the placement of cookies, allow cookies only on a case-by-case basis, exclude the acceptance of cookies in specific cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
The specific cookies and services used on this website can be found in this privacy policy.
Contact Form
If you send inquiries to us via the contact form, the information you provide in the form, including the contact details you provide, will be stored by us to process your inquiry and for follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR), if it was requested; consent can be withdrawn at any time.
The data you provide in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after processing your inquiry). Mandatory statutory retention periods, especially retention periods required by law, remain unaffected.
Inquiries by Email, Phone, or Fax
If you contact us via email, phone, or fax, your inquiry, including any personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR), if it was requested; consent can be withdrawn at any time.
The data you send us through contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after handling your request). Mandatory statutory retention periods, especially legal retention periods, remain unaffected.
5. Social Media
This website integrates elements from the social network Facebook. The service provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.
An overview of the Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US.
When the social media element is active, a direct connection is established between your device and the Facebook server. This allows Facebook to receive the information that you have visited this website with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of this website to your Facebook profile. As a result, Facebook can associate the visit to this website with your user account. We would like to point out that, as the provider of the site, we have no knowledge of the content of the transmitted data or how it is used by Facebook. For more information, please refer to Facebook's privacy policy: https://www.facebook.com/privacy/explanation.
If consent has been obtained, the use of the service is based on Art. 6 Para. 1 lit. a GDPR and § 25 TTDSG. Consent can be withdrawn at any time. If no consent was obtained, the use of the service is based on our legitimate interest in achieving as much visibility as possible on social media.
To the extent that personal data is collected on our website through the tools described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to the collection of data and its transfer to Facebook. The subsequent processing by Facebook is not part of this joint responsibility. Our shared obligations have been documented in a Joint Processing Agreement. You can find the text of the agreement here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can exercise data subject rights (e.g., access requests) concerning the data processed by Facebook directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.
Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381, and https://www.facebook.com/policy.php.
This website includes features of the Instagram service, which is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the social media element is active, a direct connection is established between your device and the Instagram server. This allows Instagram to receive information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. As a result, Instagram can associate the visit to this website with your user account. We would like to point out that, as the provider of the site, we have no knowledge of the content of the transmitted data or how it is used by Instagram.
If consent has been obtained, the use of the service is based on Art. 6 Para. 1 lit. a GDPR and § 25 TTDSG. Consent can be withdrawn at any time. If no consent was obtained, the use of the service is based on our legitimate interest in achieving as much visibility as possible on social media.
To the extent that personal data is collected on our website through the tools described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to the collection of data and its transfer to Facebook or Instagram. The subsequent processing by Facebook or Instagram is not part of this joint responsibility. Our shared obligations have been documented in a Joint Processing Agreement. You can find the text of the agreement here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook and Instagram products. You can exercise data subject rights (e.g., access requests) concerning the data processed by Facebook or Instagram directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.
Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875, and https://de-de.facebook.com/help/566994660333381.
Further information can be found in Instagram's privacy policy: https://instagram.com/about/legal/privacy/.
6. Analytics Tools and Advertising
WP Statistics
This website uses the analytics tool WP Statistics to statistically evaluate visitor traffic. The provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).
With WP Statistics, we can analyze the use of our website. WP Statistics collects log files (IP address, referrer, browser used, user origin, search engine used) and actions taken by visitors on the site (e.g., clicks and views).
The data collected by WP Statistics is stored exclusively on our own server.
The use of this analytics tool is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in anonymously analyzing user behavior to optimize both our online offerings and advertising. If consent was requested, the processing is solely based on Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, provided the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) as per TTDSG. The consent can be revoked at any time.
IP Anonymization
We use WP Statistics with anonymized IP addresses. Your IP address is shortened, so it can no longer be directly assigned to you.
7. Newsletter
Newsletter Data
If you wish to receive the newsletter offered on this website, we need your email address and information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. No other data is collected, or only on a voluntary basis. We use this data solely for sending the requested information and do not share it with third parties.
The processing of the data entered into the newsletter registration form is solely based on your consent (Art. 6 Para. 1 lit. a GDPR). The consent to store the data, the email address, and its use for sending the newsletter can be revoked at any time, for example, via the "unsubscribe" link in the newsletter. The lawfulness of the data processing carried out before the withdrawal remains unaffected.
The data you provided for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter with us or the newsletter service provider and will be deleted after unsubscribing from the newsletter or when the purpose for storage is no longer applicable. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion, within the scope of our legitimate interest under Art. 6 Para. 1 lit. f GDPR.
Data stored for other purposes remains unaffected by this.
After unsubscribing from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data in the blacklist will be used only for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest under Art. 6 Para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.
8. Plugins and Tools
YouTube with Enhanced Privacy
This website embeds videos from YouTube. The operator of the site is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they view a video. However, the transfer of data to YouTube partners is not necessarily excluded in enhanced privacy mode. Therefore, YouTube establishes a connection to the Google DoubleClick network, regardless of whether you view a video or not.
Once you start a YouTube video on this website, a connection to YouTube's servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube may store various cookies or use similar recognition technologies (e.g., device fingerprinting) once a video is started. This allows YouTube to collect information about visitors to this website. This information is used, among other things, to gather video statistics, improve user-friendliness, and prevent fraud.
Additional data processing activities may be triggered once a YouTube video is started, over which we have no influence.
The use of YouTube is in the interest of presenting our online offerings in an engaging way. This constitutes a legitimate interest under Art. 6 Para. 1 lit. f GDPR. If consent has been requested, the processing is based solely on Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. The consent can be revoked at any time.
Further information on data protection at YouTube can be found in their privacy policy: https://policies.google.com/privacy?hl=en.
Google Fonts (Local Hosting)
This website uses Google Fonts for uniform font display, which are provided by Google. The Google Fonts are locally installed, meaning there is no connection to Google’s servers.
For more information on Google Fonts, see: https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en.
Font Awesome (Local Hosting)
This website uses Font Awesome for consistent font display. Font Awesome is locally installed, meaning there is no connection to Fonticons, Inc.'s servers.
For more information on Font Awesome, refer to their privacy policy: https://fontawesome.com/privacy.
Google Maps
This website uses the Google Maps service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer. When Google Maps is activated, Google may use Google Fonts to ensure a uniform display of fonts. When you access Google Maps, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly.
The use of Google Maps is in the interest of presenting our online offerings in an engaging way and ensuring easy discoverability of the locations listed on our website. This constitutes a legitimate interest under Art. 6 Para. 1 lit. f GDPR. If consent has been requested, the processing is based solely on Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. The consent can be revoked at any time.
Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on the handling of user data, please see Google's privacy policy: https://policies.google.com/privacy?hl=en.
Source: https://www.e-recht24.de
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) and related consents, we use the "Real Cookie Banner" consent tool. Details about the functioning of "Real Cookie Banner" can be found at: https://devowl.io/en/rcb/data-processing/.
Legal bases for the processing of personal data in this context are Art. 6 Para. 1 lit. c GDPR and Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is managing the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obligated to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
