Privacy Policy

Privacy Policy for Our Website

We are pleased that you are visiting our website and would like to provide you with as much information as possible about how your data is processed in connection with your visit.

Introduction

When you visit our website, we collect personal data from you. This data is necessary for you to use our website or enables us to take your preferences into account. It may also include information that you voluntarily provide to us through the contact options available on these pages.

We use this data to ensure the proper operation and all functionalities of our website and to respond to your inquiries.

Below, we provide information about what data is collected on our website and for what purposes it is processed. You will also find information about your rights and contact information for us and our Data Protection Officer.

Contact and Data Protection Officer

This Privacy Policy applies to the website of

Usedom Tourismus
GmbH Hauptstrasse 42
17459 Seebad Koserow Email
: info@usedom.de 
Phone: +49 (0) 38375 244
244 Fax: +49 (0) 38375 244
145 www: https://www.usedom.de/

You can contact our Data Protection Officer as follows:

ECOVIS Keller Rechtsanwälte PartG
mbB Attorney Axel Keller, LL.M. / Senior Associate Karsten
Neumann August-Bebel-Straße 10-12
18055
Rostock Phone: +49 381 12 88 49 -
0 Email:
dsb-nord@ecovis.com Website: www.ecovis.com/datenschutzberater

You have the right at any time to contact our Data Protection Officer free of charge and, if you wish, confidentially, to assist you in exercising your data protection rights.

Data Collection and Purposes of Processing

We use the personal data you provide to us only for the purposes for which it is intended.

The legal basis for processing your data may include, in particular,

your consent pursuant to Art. 6(1)(a) of the GDPR, for example, by agreeing to the use of cookies or web analytics,
the initiation and fulfillment of a contract pursuant to Article 6(1)(b) of the GDPR, for example, when you contact us via the form,
our legitimate interest pursuant to Article 6(1)(f) of the GDPR, for example in the context of public relations, ensuring the necessary functionality of the website, IT and internet security, quality assurance, fraud prevention, and the prosecution of criminal offenses.

If you have provided us with consent for a specific purpose, you may revoke it at any time without formal notice, effective for the future. Revoking your consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its revocation.

Personal data is transferred to government agencies and authorities solely on the basis of mandatory national legal provisions.

The individuals we have entrusted with processing the data are obligated to maintain confidentiality and to process the data lawfully. In the event that your personal data is further processed for a purpose other than the original one, we will notify you accordingly.

We use external service providers (data processors) to support certain technical processes related to data analysis, processing, and/or storage. Both we and the data processor are obligated to comply with the technical and organizational measures set forth in Article 32 of the GDPR, and the external service provider is additionally bound by a duty of confidentiality. Processing is carried out exclusively on our behalf and in accordance with our instructions. Any processing of your personal data beyond this commissioned data processing will only take place with your explicit consent or in cases required by law or ordered by administrative or judicial authorities.

Data transfers to third countries (countries outside the European Economic Area—EEA) will only take place to the extent that this is necessary for the performance of a contract, is required by law, you have given your consent to the data processing, or is necessary to ensure various functionalities on the website. We will inform you separately of the details, to the extent required by law.

In connection with the purely informational use of our website, we store the data that your browser transmits to our server for the period of time necessary to resolve malfunctions or error messages. This data is typically deleted within 7 days after the end of the Internet connection.

Additional retention periods depend on your use of the website.

If you contact us with an inquiry using one of our contact options, we will store the personal data we collect from you starting at the time of collection. We store the data collected in this manner for the duration of our business relationship, which includes, among other things, the initiation and execution of a contract. In addition, we are subject to various retention and documentation requirements arising, among other things, from the German Commercial Code (HGB), the German Fiscal Code (AO), or other tax laws. The retention periods prescribed therein are up to ten years after the end of the year in which the contractual relationship was terminated. Finally, with regard to the ability to defend against legal claims and to provide evidence of compliance with data protection obligations, the retention period is also determined by the statutory limitation periods, which, pursuant to Sections 195 et seq. of the German Civil Code (BGB), which generally amount to 3 years from the end of the year in which the claim arose.

You will be informed of any additional retention periods later in this Privacy Policy.

Please also review our specific privacy notices for job applicants, suppliers and business partners, employees, and customers.

You have the following rights as a data subject:

the right of access under Article 15 of the GDPR,
the right to rectification under Article 16 of the GDPR,
the right to erasure under Article 17 of the GDPR,
the right to restriction of processing of personal data under Article 18 of the GDPR,
the right to data portability under Article 20 of the GDPR, and
the right to object to the processing of personal data pursuant to Article 21 of the GDPR.

In addition, under Article 77 of the GDPR, you have the right to lodge a complaint with a data protection authority. The complaint may be lodged with the data protection authority of the country where you reside, where you work, or where the alleged violation occurred. If the data protection authority of another Member State has jurisdiction over the entity you are complaining about, the national data protection authority will coordinate with the other data protection authority. An overview can be found here:

www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The supervisory authority responsible for us is

The State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania
Schloss Schwerin, Lennéstraße 1, 19053 Schwerin
Tel.: +49 385 594 94 0
Fax: +49 385 594 94 58
Email: info@datenschutz-mv.de
Website: www.datenschutz-mv.de
Contact: www.datenschutz-mv.de/kontakt/kontaktformular/

Vimeo

We use Vimeo, among other providers, to embed videos. Vimeo is a video platform operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. Data processing by Vimeo on our website is carried out with your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time.

On some of our web pages, we use plugins from the provider Vimeo, which allow us to display videos directly on our website. When you visit the pages on our website that contain such a plugin, a connection is established to the Vimeo servers. As a result, your personal data is transmitted to the Vimeo server: IP address, browser type, operating system, web pages visited, device information, session duration, and bounce rate. If you are logged in as a Vimeo member at the time, Vimeo associates this information with your personal user account. When you use the plugin—for example, by clicking the play button on a video—this information is also associated with your user account. You can prevent this association by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies.

For more information on data processing and privacy policies by Vimeo, please visit vimeo.com/privacy, vimeo.com/cookie_policy, and vimeo.com/privacy#international_data_transfers_and_certain_user_rights.

YouTube

We have integrated components of the YouTube service into our website. Data processing by YouTube on our website is carried out with your prior consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time.

First, we have integrated YouTube components as links. As soon as you click on the link, YouTube will process your data. If you do not wish for such data processing to take place, you can prevent the transmission of data by not clicking on the link.

Furthermore, we have embedded videos on our website that are only activated when you actively click on the respective video, and data transmission to YouTube only begins at that point.

YouTube is an online video platform that allows video publishers to upload video clips for free and enables other users to view, rate, and comment on them—also free of charge. YouTube permits the publication of all types of videos, which is why complete movies and television shows, as well as music videos, trailers, and user-generated videos, are available via the website.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our webpages on which a YouTube video is embedded, a connection is immediately established with the servers of Google LLC or its subsidiary YouTube LLC.

The YouTube component activated on your system prompts your web browser to download a display of the corresponding YouTube component. As part of this technical process, YouTube and Google learn which specific subpage of our website you are visiting.

If you are logged into YouTube at the same time, YouTube recognizes which specific subpage you are visiting. This information is collected by the YouTube component and assigned to your YouTube account by YouTube. If you interact with a YouTube component integrated into our website, the data and information transmitted as a result are associated with your personal YouTube user account and are stored and processed by YouTube and Google.

YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged into YouTube at the same time you access our website.

If you do not wish for this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before visiting our website.

Further information and the applicable privacy policies of YouTube and Google can be found at https://policies.google.com/privacy .

Cookies

We use cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

Cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the websites and servers you visit to distinguish your specific browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified by its unique cookie ID.

By using cookies, we can provide users of this website with more user-friendly services. Information and offers on our website can be optimized for the user, for example, by recognizing the website user. This means that login credentials do not need to be re-entered with every visit to the website, as this information is retrieved by the website and the cookie stored on the user’s computer system.

However, a distinction must be made regarding the use of cookies with respect to different purposes. To the extent that these small files are strictly necessary for the website to function properly, their use is not voluntary. The legal basis for the use of cookies in this case is Article 6(1)(f) of the GDPR.

In addition, however, the website also uses cookies for the purpose of analyzing user behavior or for marketing purposes. This use, however, only occurs if you have given us your consent when you first visited the website. You may, however, prevent our website from setting cookies at any time by adjusting the settings of your web browser accordingly, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers. If the setting of cookies is disabled in the web browser you are using, you may not be able to fully use all features of our website.

Below, we have compiled links where you can find detailed information on how to disable cookies in common browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Google Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Our website provider automatically collects and stores information in so-called server log files, which are automatically transmitted to us by your browser. The information collected may include the

browser types and versions used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (so-called referrer),
subpages accessed on our website via the accessing system,
the date and time of access to the website,
an Internet Protocol (IP) address,
the Internet service provider of the accessing system, and
other data and information used for security purposes in the event of attacks on our information technology systems.

We do not draw any conclusions about you based on the use of this general data and information. Rather, this information is needed to

deliver the content of our website correctly,
optimize the content of our website and the advertising on it,
ensure the continued functionality of our information technology systems and the technology of our website, and
to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyberattack.

We therefore evaluate this data and information, on the one hand, for statistical purposes and, on the other hand, with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The processing is carried out within the scope of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The anonymous data from the server log files is stored separately from any personal data you have provided. This data is not combined with other data sources. However, if there are indications of unlawful use of our website, we may subsequently review this data.

We have integrated fonts from Google on our website to ensure consistent font display. We have installed Google Fonts locally, which means no connection is established to Google’s servers. As a result, no data is transmitted to Google. The integration of the fonts is based on our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

The operator is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Further information and Google’s applicable privacy policy can be found at developers.google.com/fonts/faq, policies.google.com/privacy, and policies.google.com/terms.

We use the cookie consent banner from MANDARIN MEDIEN Gesellschaft für digitale Lösungen mbH to obtain your consent to the storage of certain cookies on your device and to document this in compliance with data protection regulations. We do this based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR to ensure legally compliant documentation and verifiability of consent, as well as to optimize consent rates.

The provider of this technology is MANDARIN MEDIEN Gesellschaft für digitale Lösungen mbH, Mueßer Bucht 1, 19063 Schwerin, website: https://www.mandarin-medien.de/.

Further information on data processing and the provider’s applicable data protection policies can be found at https://www.mandarin-medien.de/datenschutz

To process bookings made through our website, we collect the personal data necessary to complete the booking. This typically includes first name, last name, address, date of birth, gender, email address, IP address, phone number, cell phone number, and other data necessary to process the booking. Personal data related to the specific booking is also required to process the booking. In particular, this may involve the mutual exchange of payment information, such as bank account details, card number, expiration date, and CVC code, as well as prices and tax charges, information on past purchasing behavior, or other details regarding your financial situation.

The transmission of this data is intended, in particular, for identity verification, payment administration, and fraud prevention. The purpose of data collection is therefore the fulfillment of (pre-)contractual obligations pursuant to Art. 6(1)(b) of the GDPR.

Our website contains information that enables you to quickly contact our company electronically and communicate directly with us, including a general electronic mail (email) address.

We have also included a contact form that you can use to get in touch with us. You have the option of voluntarily providing your title, first name, last name, and phone number. However, to communicate with us, you must include your email address and the specific nature of your inquiry in your message.

If you contact us via email or through the contact form, the personal data you provide will be automatically stored. Such personal data provided on a voluntary basis is stored for the purpose of processing your inquiry or contacting you. This personal data will not be disclosed to third parties.

The transmission of data via the contact form is voluntary and takes place in accordance with Art. 6(1)(a) of the GDPR. If processing is necessary for the performance of a contract or takes place in the context of implementing pre-contractual measures, data processing is carried out in accordance with Article 6(1)(b) of the GDPR.

We use an external service provider (data processor) for this technical process. Both we and the data processor are obligated to comply with the technical and organizational measures under Article 32 of the GDPR, and the external service provider is additionally bound by a confidentiality obligation. Processing takes place exclusively on our behalf and in accordance with our instructions.

We have integrated components from SuperX GmbH into our website.

SuperChat is a live support help desk software that enables direct, real-time communication (known as live chat) with visitors to your website or via other channels (WhatsApp, Facebook, Instagram).
The SuperChat component was developed by SuperX GmbH, Prenzlauer Allee 242 / Haus 7, 10405 Berlin, Germany.

When you contact us via WhatsApp, your personal data is imported into the SuperChat system via the WhatsApp Business API.
Each time you visit a page on our website that is equipped with a SuperChat component, this component collects data for the purpose of operating the live chat system and analyzing the system’s performance. Further information about Superchat is available at https://www.superchat.de/ .

The Superchat component sets a cookie on your device. The Superchat cookie can be used to create pseudonymized user profiles. We may use such pseudonymized user profiles to analyze visitor behavior and to analyze and maintain the proper operation of the live chat system. This analysis also serves to improve our services. The data collected via the Superchat component will not be used for identification purposes without first obtaining your separate, explicit consent. This data will not be merged with personal data or with other data containing the same pseudonym.
You can prevent cookies from being set at any time by adjusting the settings in your web browser, thereby permanently objecting to the setting of cookies. In addition, a cookie already set by the Superchat component can be deleted at any time via your web browser or other software programs.

The applicable privacy policy of SuperX GmbH can be accessed at https://www.superchat.de/datenschutz .

You have the option to subscribe to our newsletter. By subscribing, you consent to receiving newsletters via email in accordance with Article 6(1)(a) of the GDPR and to the associated tracking.

We offer two newsletter subscription options.

First, there is one for you as an end customer, where you’ll find all the latest news about the island of Usedom, events, and lodging options.

We also offer a newsletter for travel agents, which contains information on press releases, activities, travel offers, marketing and social media campaigns, awards for tourism businesses, travel statistics, and similar topics related to the island of Usedom.

To sign up for the newsletter, we collect your data exclusively through direct contact with you. To send the newsletter, we process your email address as personal data. You can generally only receive our company’s newsletter if

you have a valid email address and
you have subscribed to the newsletter.

The personal data collected as part of a newsletter subscription is used exclusively for sending our newsletter. Furthermore, newsletter subscribers may be notified by email if this is necessary for the operation of the newsletter service or a related registration, such as in the event of changes to the newsletter content or changes in technical conditions.

We use the service provider Episerver GmbH, Wallstraße 16, 10179 Berlin, to send the newsletter. We have entered into a data processing agreement with this service provider.

You may cancel your subscription to our newsletter at any time. You may revoke your consent to the storage of personal data that you have provided to us for the purpose of sending the newsletter at any time. Your data will only be stored for as long as you have given us your consent. To revoke your consent, you may contact us at any time using the contact information provided on this page or use the unsubscribe feature included in every newsletter.

Newsletter Tracking

Our newsletters may contain so-called tracking pixels. A tracking pixel is a tiny graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows us to statistically evaluate the success or failure of online marketing campaigns. Using the embedded web beacon, we can determine whether and when an email was opened by a recipient and which links in the email were clicked by that recipient.

We store and analyze such personal data collected via the tracking pixels contained in the newsletters to optimize newsletter distribution and better tailor the content of future newsletters to the recipients’ interests. This personal data is not disclosed to third parties.

Data subjects are entitled at any time to revoke the separate consent granted via the double opt-in procedure. Following revocation, this personal data will be deleted by the data controller, unless the right to erasure is restricted by law. We consider unsubscribing from the newsletter to be a revocation of consent.

We use excerpts from the DS Destination Solutions websites on our website. The catalog ordering feature is integrated directly onto the provider’s server via an iFrame. As a result, your IP address is transmitted to the DS Destination Solutions server and processed there. In addition, a session cookie is set. It cannot be ruled out that DS Destination Solutions may also transmit this information to a server in a third country.

The operator is DS Destination Solutions GmbH, Breslauer Platz 4, 50668 Cologne.

The legal basis for the processing of your personal data is a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR, namely the improvement of the user-friendliness of our website.

For further information, please refer to the privacy policy of DS Destination Solutions GmbH at https://www.ds-destinationsolutions.com/datenschutz .

Google Maps

As part of our website, for example to locate our company’s locations, we use interactive maps from the “Google Maps API” mapping service, and the associated data processing is carried out with your prior consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time.

The operator is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

When you use this service, information about your use of the website, as well as your IP address, is transmitted to and stored on Google’s servers.

Pursuant to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of June 4, 2021, on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, the transfer of data to the United States is based on standard contractual clauses, see here https://business.safety.google/gdprcontrollerterms/ and here https://business.safety.google/gdprcontrollerterms/sccs/ .

We cannot rule out the possibility that Google may transfer your data to third parties, for example, in cases of transfers required by law or when data is processed by third parties on Google’s behalf. For more information and Google’s applicable privacy policies, please visit https://policies.google.com/privacy and https://policies.google.com/terms .

OpenStreetMap

We use map sections from OpenStreetMap (OSM) on our website.
This is a community project managed by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

The maps are embedded using an iframe or by retrieving so-called tiles (map images) from the provider’s server. As a result, your IP address is transmitted to and processed by the OSM server in the United Kingdom. In addition, a session cookie is set. It cannot be ruled out that OpenStreetMap may also transmit this information to a server in a third country.

The legal basis for the processing of your personal data is a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR, namely the improvement of the user-friendliness of our website.

For further information, please refer to OpenStreetMap’s privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy .

Use of Social Media Plugins

The website also incorporates social media platforms such as Facebook, Twitter, and Instagram. These platforms sometimes include buttons and plugins that transmit data to the operators of the respective social media platforms as soon as the page loads—that is, without any further action on the part of the user.

Your visit to these profiles triggers a variety of data processing operations. When you visit our profiles, your personal data is collected, used, and stored not only by us but also by the operators of the respective social network. This occurs even if you do not have a profile on the respective social network yourself. The specific data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily transparent to us.

When you visit our social media profiles, the operators of the social media platforms collect, among other things, your IP address as well as other information stored on your device in the form of cookies. This information is used to provide us, as the account holders, with statistical data regarding interactions with us.

Please note that you use our social media profiles and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating).

If you contact us via our social media profiles, please consider whether you wish to send the relevant information through the platform or if another contact method would be more appropriate. If you contact us via our social media profiles, the legal basis for data processing is a legitimate interest pursuant to Art. 6(1), sentence 1, lit. f of the GDPR. This legitimate interest consists of disseminating information about our activities and responding to your inquiry. Please also note that—depending on your privacy settings—we, like all other users of the social media platform, may be able to access the information stored in your profile (e.g., your name, profile picture, or age).

Facebook (link via icon)

We have integrated components from Facebook into this website as links. Facebook is a social network. A social network is a social gathering place operated on the Internet—that is, an online community that generally allows users to communicate with one another and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the online community to share personal or business-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos, and connect with others through friend requests.

Clicking on the icon voluntarily will redirect you to Facebook, over which we have no control.

The controller responsible for the processing of personal data is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

If you do not wish for Facebook to process your data, please do not click the link.

Facebook’s Privacy Policy, available at www.facebook.com/about/privacy/ , provides information about Facebook’s collection, processing, and use of personal data. It also explains the settings options Facebook offers to protect your privacy.

Insights Data Analysis

We receive anonymous statistics from Facebook regarding the use of the fan page (so-called “Insights”). The following information is provided, for example:

Followers: The number of people who follow our fan page—including growth and trends over a defined time frame
Reach: The number of people who see a specific post on our fan page and the number of interactions on a post
Ad performance: Number of people who saw an ad
Demographics: Average age of visitors, gender, location, language

We use these statistics—which do not allow us to draw conclusions about individual users—to continuously improve our online presence on Facebook and better cater to our users’ interests. We cannot link this statistical data to our fans’ profile information. You can use your Facebook settings to control the type of targeted ads you see.

We have entered into a joint controller agreement with Facebook regarding the processing of personal data in accordance with Article 26 of the GDPR. Accordingly, Facebook is the sole controller with respect to the processing of Insights data. In this regard, Facebook is responsible for fulfilling the information obligations under Articles 12 and 13 of the GDPR, for ensuring the rights of data subjects under Articles 15 through 22 of the GDPR, for data security, and for reporting data breaches (Articles 32 through 34 of the GDPR). Furthermore, Facebook remains the sole data controller for the processing of other personal data.

Instagram (link via icon)

We have integrated components of the Instagram service as links on our website. Instagram is a service that qualifies as an audiovisual platform and enables users to share photos and videos, as well as to repost such content on other social networks. If you voluntarily click on the link, you will be redirected directly to Instagram. We have no influence over Instagram’s data processing. If you do not consent to Instagram’s data processing, please do not click on the link.

The controller responsible for the processing of personal data is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Further information and Instagram’s applicable privacy policy can be found at www.instagram.com/about/legal/privacy/ .

YouTube (link via icon or video)

We have integrated components of the YouTube service as links on our website.

YouTube is an online video platform that allows video publishers to upload video clips for free and enables other users to view, rate, and comment on them—also free of charge. YouTube allows the publication of all types of videos, which is why full-length movies and TV shows, as well as music videos, trailers, and user-generated videos, are available via the website.

The controller responsible for the processing of personal data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As soon as you click the link, YouTube will process your data. If you do not wish for this data processing to occur, you can prevent the transmission of data by not clicking the link. Furthermore, we have embedded videos on our website that are only activated when you actively click on the respective video; data transmission to YouTube begins only at that point.

We do not know—and have no control over—whether and to what extent data is transmitted to YouTube after clicking the link or a video, or whether and to what extent such data is also transmitted to the United States.

Further information and the applicable privacy policies of YouTube and Google can be found at policies.google.com/privacy .

LinkedIn (link via icon)

When you visit our LinkedIn page, follow us, or interact with the page, LinkedIn processes personal data to provide us with what are known as Page Insights. With regard to these Page Insights, we are jointly responsible with LinkedIn and have entered into a supplementary agreement for this purpose. LinkedIn undertakes to assume responsibility for the provision of Page Insights in accordance with the GDPR and will comply with all applicable obligations under the GDPR regarding the processing of Page Insights (including, but not limited to, Articles 12–22 and Articles 32–34 of the GDPR).

In particular, LinkedIn processes data that the member has provided to LinkedIn, such as job title, country, industry, years of service, company size, and employment status from a member’s profile. In addition, LinkedIn processes information about how a member has interacted with our company page, such as whether a member is a follower.

The controller responsible for the processing of personal data is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; parent company: LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085.

If you do not wish LinkedIn to process your data, please do not click the link.

The data policy published by LinkedIn, which is available under the LinkedIn Privacy Policy , provides information about the collection, processing, and use of personal data by LinkedIn.

WhatsApp (link via icon)

WhatsApp is a service that qualifies as an audiovisual and telecommunications platform and enables users to share photos and videos. If you voluntarily click the link, you will be redirected directly to WhatsApp. We have no control over WhatsApp’s data processing. If you do not consent to WhatsApp’s data processing, please do not click the link.

WhatsApp is a service provided by WhatsApp Inc., part of the Meta corporate group, headquartered at 1601 Willow Road, Menlo Park, California 94025, USA, with a subsidiary, WhatsApp Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you have WhatsApp installed on your device, you have simultaneously agreed to the Terms of Service (https://www.whatsapp.com/legal/terms-of-service-eea ) and WhatsApp’s Privacy Policy (https://www.whatsapp.com/legal/privacy-policy-eea ).

Google Analytics (with anonymization feature)

We have integrated the Google Analytics component (with anonymization) into our website. Data processing is carried out with your prior consent in accordance with Art. 6(1)(a) of the GDPR. You may revoke your consent at any time.

The operator is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is a web analytics service. Web analytics refers to the collection, gathering, and evaluation of data regarding the behavior of website visitors. Among other things, a web analytics service collects data on which website a data subject came from to visit a website (known as a “referrer”), which subpages of the website were accessed, and how often and for how long a subpage was viewed.

The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that illustrate activity on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie on your system. Each time you visit a page on this website that includes a Google Analytics component, your web browser is automatically prompted by that component to transmit data to Google for the purpose of online analysis. The cookie stores personal information, such as the time of access, the location from which access originated, the frequency of your visits to our website, your preferred language, and your browser. Each time you visit our website, this personal data—including the IP address you are using—is transmitted to Google. Google stores this personal data.

When IP anonymization is enabled, your IP address is truncated by Google. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of June 4, 2021, on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the United States are based on standard contractual clauses; see here business.safety.google/gdprcontrollerterms/ and here business.safety.google/gdprcontrollerterms/sccs/. Google has designated a representative for us in Ireland. We have entered into agreements governing data processing within the EU. If Google does not store your data within the EU, Google Ireland Ltd. is responsible for concluding the standard contractual clauses with the respective partner.

You can prevent cookies from being set at any time by adjusting the settings of the web browser you are using, thereby permanently objecting to the use of cookies.

Furthermore, you have the option to object to and prevent the collection of data generated by Google Analytics regarding your use of this website, as well as the processing of this data by Google. To do so, you must download and install a browser add-on from the link tools.google.com/dlpage/gaoptout .

Further information and Google’s applicable privacy policy can be found at policies.google.com/privacy and policies.google.com/terms . Google Analytics is explained in more detail at www.google.com/intl/de_de/analytics/.

Google Tag Manager

We have integrated the Google Tag Manager component into our website, which allows website tags to be managed through a single interface. This component triggers other tags. Please note that the triggered tags may, in turn, collect data; however, this data is not used by Tag Manager.

Data processing on our website by Google takes place with your explicit consent in accordance with Article 6(1)(a) of the GDPR via the consent banner we use. Google processes the following data based on this component: mouse movements, time, IP address, location, visitor behavior, browser, tracking media, websites visited, and time zone.

The operator is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA, represented in the EU by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

According to COMMISSION IMPLEMENTING DECISION (EU) 2021/914 of June 4, 2021, on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, data transfers to the United States are based on standard contractual clauses; see here business.safety.google/gdprcontrollerterms/ and here business.safety.google/gdprcontrollerterms/sccs/. Google has designated a representative in Ireland. We have entered into agreements governing data processing within the EU. If Google does not store your data within the EU, Google Ireland Ltd. is responsible for entering into the standard contractual clauses with the respective partner.

For more information and Google’s applicable privacy policies, please visit policies.google.com/privacy and policies.google.com/terms.

Sentry

We use the analytics service “Sentry” provided by Functional Software, Inc., dba Sentry, 45 Fremont St, San Francisco, California 94105, U.S.
Sentry uses cookies and similar technologies to log and monitor errors that can be detected in the source code and to improve the technical functionality and performance of our website. To address error messages and potential performance bottlenecks, we transmit anonymized error log data regarding your use of our website to our Sentry installation, where it is analyzed. This data consists of metadata, such as information about the operating system and browser you are using, the programming language used, as well as possible causes of errors and your server. We will delete your stored data no later than 90 days after collection.

The legal basis for data processing is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in enabling you to make the best possible use of our website and the services offered on it.
We use the self-hosted version of Sentry (for more information, see: https://develop.sentry.dev/self-hosted/ ). This means that the software is stored and operated on our own servers in Germany, and no data is transferred to third parties.

For more information on Sentry’s Terms of Service and Privacy Policy, please visit https://sentry.io/terms/ and https://sentry.io/privacy/ .

EC and debit cards

On our website, we offer payment options that include EC and Giro cards.

These payment services are provided by Telecash GmbH & Co. KG, Konrad-Adenauer-Allee 1, 61118 Bad Vilbel. The contracting party for billing is the financial institution of the respective hotel, which is integrated into the booking process via the external service provider “Vioma.”

If you select payment via EC and Giro cards, the data you enter will be transmitted to the provider(s) for the payment transaction. This is done on the basis of Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract).

Credit Cards

On our website, we offer payment by credit card, such as Mastercard, Maestro, JCB, Vpay, or American Express.

These payment services are provided by First Cash Solution GmbH, Okenstraße 7, 77652 Offenburg. The contractual partner for billing is the respective hotel’s financial institution, which is integrated into the booking process via the external service provider “Vioma.”

If you select payment by credit card, the data you enter will be transmitted to the providers for the payment transaction. This is based on Article 6(1)(a) of the GDPR (consent) and Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract).

Please note the following privacy notice regarding the collection of personal data in accordance with the GDPR as part of the UsedomCard digital travel companion.

Update to Our Privacy Policy

With the entry into effect of the Data Privacy Framework, we hereby inform our customers, business partners, employees, job applicants, website visitors, and other communication partners that, when data is transferred to U.S. service providers such as Amazon, Asana, Google, Microsoft, YouTube, etc., an adequate level of data protection can now be assumed based on the individual company certifications and their publication in the Data Privacy Framework List. We are currently reviewing the service providers and tools we use and will subsequently take the necessary steps to ensure legally compliant data processing and inform you of this in our privacy notices.

Effective: June 30, 2026