Data Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and appreciate your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is any information that can identify you personally.

1.2 The data controller responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) is Christine Baron, Nussbaumstr. 20, 93128 Regenstauf, Germany, phone: +4917683024611, e-mail: info@baroness-tours-regensburg.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, meaning when you do not register or provide us with any information, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically required to display the website:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for other purposes. However, we reserve the right to review the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider who provides its services either directly or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have entered into a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

4) Contacting Us

When you contact us (e.g., via contact form or e-mail), personal data is collected. The data collected when using a contact form is visible in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you as well as for the related technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed. This is the case when it is evident from the circumstances that the matter has been fully clarified and no legal retention obligations stand in the way.

5) Rights of the Data Subject

5.1 The applicable data protection law grants you the following data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

Right of access according to Article 15 GDPR;
Right to rectification according to Article 16 GDPR;
Right to erasure according to Article 17 GDPR;
Right to restriction of processing according to Article 18 GDPR;
Right to notification according to Article 19 GDPR;
Right to data portability according to Article 20 GDPR;
Right to withdraw consent given according to Article 7(3) GDPR;
Right to lodge a complaint according to Article 77 GDPR.

5.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

6) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed based on explicit consent according to Article 6(1)(a) GDPR, the data will be stored until you withdraw your consent.

If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.

When personal data is processed based on Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate reasons for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for direct marketing purposes based on Article 6(1)(f) GDPR, the data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Baroness Tours Regensburg