Datenschutz
Information on the processing of personal data
Below, we provide information on the processing of personal data when you use our website. Personal data means any information relating to an identified or identifiable natural person, such as surname, first name, address, email address, browsing behaviour, etc.
1. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation, other national data protection laws of the Member States and other applicable data protection provisions is:
ADAC Travel & Event Mittelrhein GmbH
Viktoriastraße 15
56068 Koblenz
represented by its Managing Director:
Marius von Wenzlawowicz
Email: [email protected]
Website: www.adac-faehren.de
Telephone: +49 (0) 671 – 920 69 – 321
Fax: +49 (0) 671 / 920 69 – 318
2. Name and address of the data protection officer
The controller’s data protection officer is:
ADAC Mittelrhein e.V.
Data Protection Officer
Viktoriastraße 15
56068 Koblenz
Email: [email protected]
3. General information
3.1 Scope of the processing of personal data
As a general rule, we process our users’ personal data only to the extent necessary to provide a functioning website, the services offered and the content.
3.2 Purposes and legal bases for the processing of personal data
The processing of personal data is based on statutory provisions and/or the user’s consent. Where we obtain the data subject’s consent for personal data processing operations, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data. Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to take pre-contractual measures. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In cases of joint controllership, Article 26 GDPR applies. Where the vital interests of the data subject or another natural person make the processing of personal data necessary, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.
The purposes of processing and their legal bases are described below:
| Purpose of processing | Categories of data | Legal basis |
| Arranging ferry bookings with ferry companies | Surname, first name, address, electronic contact details, e.g. email address, telephone number, date of birth, passport details, vehicle details | Performance of a contract pursuant to Article 6(1), first sentence, point (b) GDPR |
| Subscription to a newsletter | Email address, surname, first name | Subject matter of consent (Article 6(1), first sentence, point (a) GDPR) |
| Archiving contractual and booking documents in accordance with the German Commercial Code (HGB) | Surname, first name, payment method, address, electronic contact details, e.g. email address, telephone number, date of birth, passport details, vehicle details | All types of data that we are required to retain, e.g. incoming payments associated with individuals; business transactions |
| Marketing communications by post | Surname, first name, address | Pursuit of legitimate interests (Article 6(1), first sentence, point (f) GDPR) |
| Retention of your data in IT systems | The data processed corresponds to the data originally processed, together with aggregated analytical data | Pursuit of legitimate interests (Article 6(1), first sentence, point (f) GDPR) |
| Analysis for statistical purposes | The data processed corresponds to the data originally processed, together with aggregated data | Pursuit of legitimate interests (Article 6(1), first sentence, point (f) GDPR) |
| Marketing communications by email and telephone | Telephone number, email address, surname, first name, subject matter of consent | Consent (Article 6(1), first sentence, point (a) GDPR) |
| Referral of business cases for debt collection | Necessary payment data from the original business transaction | Change of purpose compatible with the original purpose (Article 6(4) GDPR), performance of contracts (Article 6(1), first sentence, point (b) GDPR) and pursuit of legitimate interests (Article 6(1), first sentence, point (f) GDPR) |
3.3 Data deletion and retention period
Personal data is deleted or blocked as soon as the purpose for its retention no longer applies. Data may be retained beyond this period if European or national regulations, laws or other provisions require a longer retention period. The retention periods prescribed by these provisions are observed, after which the data is blocked or deleted, unless further retention is necessary for the conclusion or performance of a contract.
3.4 Transfer of data to ferry companies
We transfer the data entered by our customers to the respective ferry company.
We act exclusively as an intermediary. The legal basis is Article 6(1), first sentence, point (b) GDPR.
Our customers enter into the contract directly with the respective ferry company.
4. Processing of personal data when visiting our website and creation of log files
4.1 Log files
Whenever you visit our website, our system automatically collects data and information from the computer system you use for this purpose.
4.1.1 Legal basis
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
4.1.2 Description and scope of data processing
When you use the website for information purposes only, i.e. without registering or otherwise providing us with information, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and ensure its stability and security:
- IP address (anonymised)
- Date and time
- Page accessed/name of the requested file
- Volume of data transferred
4.1.3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Data is stored in log files to ensure that the website functions properly. We also use the data to optimise the website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR.
4.1.4 Retention period
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Where data is collected to provide the website, this is the case when the respective session ends.
Where data is stored in log files, this is the case after no more than 14 days. Data may be stored beyond this period. In this case, users’ IP addresses are deleted or modified so that the client accessing the website can no longer be identified.
4.1.5 Options for objection and deletion
The collection of data to provide the website and its storage in log files are essential for the operation of the website. Consequently, users have no option to object.
4.2 Use of cookies
Our website uses cookies. In addition to the data mentioned above, cookies are therefore stored on your computer when you use our website. Cookies are text files stored in the Internet browser or by the Internet browser on the user’s computer system when a website is accessed. They provide certain information to the party that sets the cookie (in this case, us). Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again. Cookies cannot execute programs or transmit viruses to your computer.
4.2.1 Legal basis
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.
The legal basis for processing personal data using cookies for analytical purposes (see Section VIII. Use of web analytics tools) is Article 6(1)(a) GDPR, provided that the user has given consent.
4.2.2 Description and scope of data processing
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Temporary cookies (see a)
- Persistent cookies (see b)
a) Temporary cookies include session cookies in particular. These store a session ID, which allows different requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website.
The following data is stored and transmitted in the cookies:
- Session ID
- Booking data
- Booking stage
These cookies are deleted when you close your browser.
b) Persistent cookies have a longer lifespan and are automatically deleted after a predefined period, which may vary depending on the cookie.
c) We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data independently of the browser you use and do not have an automatic expiry date.
4.2.3 Purpose of data processing
Cookies help make our online services more user-friendly and efficient overall. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be provided without cookies, as they require the browser to be recognised even after navigating to another page.
Analytics cookies are used to improve the quality of our website and its content. These cookies allow us to understand how the website is used and continuously improve our services. For example, we can expand our content on topics viewed by a large number of users and focus on those topics. If our analysis shows that certain topics attract little interest, we can reduce our efforts in those areas and focus on topics that are more interesting to users.
These purposes also constitute our legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR.
Retention period
a) Temporary cookies are automatically deleted when you close your browser. Session cookies, which are a type of temporary cookie, are deleted when you log out or close your browser.
b) Persistent cookies remain on the hard drive even after the page is closed and are automatically deleted after a predefined period, which may vary depending on the cookie.
4.2.4 Options for objection and deletion
As a user, you have full control over the use of cookies. You can configure your browser settings according to your preferences and, for example, refuse or restrict the acceptance of third-party cookies or all cookies. Cookies that have already been stored can be deleted at any time in your browser’s security settings, including automatically
.
Please note that, in these cases, you may not be able to use all the features of this website.
You can prevent the use of HTML5 storage objects by using your browser’s private browsing mode. We also recommend regularly deleting your cookies and browsing history manually.
4.2.5 Cookie declaration
4.3.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, operated by Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Through this web analytics service, data is collected and stored to create usage profiles under pseudonyms. These usage profiles are used to evaluate visitor behaviour in order to tailor and improve the services presented on this website. Google Analytics uses “cookies”, small text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google first truncates your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website usage and Internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Usage profiles maintained under a pseudonym are likewise not combined with personal data about the user without the user’s express and separately given consent. You can prevent cookies from being stored by adjusting your browser settings; however, please note that you may then be unable to use all the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout).
You can consult Google’s privacy information. Further information on the terms of service and data protection is available at www.google.com/analytics/terms/de.html and at www.google.com/intl/de/analytics/privacyoverview.html. Please note that Google Analytics has been extended on this website with the “anonymizeIp” code to ensure the anonymised collection of IP addresses (known as IP masking).
4.3.2 Google Maps
Scope of data processing
We use the Google Maps API, a mapping service provided by Google Inc. (“Google”), on our website to display an interactive map. When Google Maps is used, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there.
Please refer to the YouTube Terms of Service and the Google Privacy Policy.
Google may transfer the collected data to third parties where required by law or where third parties process this data on Google’s behalf.
Legal basis for data processing
The legal basis for processing the data is Article 6(1)(a) GDPR.
Purpose of processing
Google Maps is used to make it easier to find the locations indicated on our website.
5. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights in relation to the controller:
5.1 Right of access
You may request confirmation from the controller as to whether we process personal data concerning you. If such processing takes place, you may request the following information from the controller:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the envisaged retention period for the personal data concerning you or, if specific information cannot be provided, the criteria used to determine that period;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) any available information about the source of the data, where the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information about whether personal data concerning you is transferred to a third country or an international organisation. In this context, you may request information about the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
5.2 Right to rectification
You have the right to obtain rectification and/or completion from the controller if the personal data concerning you that is processed is inaccurate or incomplete. The controller must carry out the rectification without undue delay.
5.3 Right to restriction of processing
You may request restriction of the processing of personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify its accuracy;
(2) the processing is unlawful and you oppose the erasure of the personal data and request restriction of its use instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
(4) if you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override yours.
Where processing of personal data concerning you has been restricted, such data may, apart from storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. Where processing has been restricted under the conditions set out above, the controller will inform you before the restriction is lifted.
5.4 Right to erasure
a) Obligation to erase
You may request that the controller erase personal data concerning you without undue delay, and the controller is obliged to erase this data without undue delay where one of the following grounds applies:
(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for processing.
(3) You object to processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object to processing pursuant to Article 21(2) GDPR.
(4) The personal data concerning you has been unlawfully processed.
(5) The erasure of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
b) Information to third parties
Where the controller has made personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of any links to, or copies or replications of, that personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to in subsection a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
5.5 Right to be informed
If you have exercised your right to rectification, erasure or restriction of processing in relation to the controller, the controller is obliged to communicate that rectification or erasure of personal data or restriction of processing to every recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about those recipients.
5.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to which the personal data was provided, where
(1) processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
(2) processing is carried out by automated means.
When exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
5.7 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. The controller will no longer process the personal data concerning you unless it demonstrates compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
5.8 Right to withdraw consent to data processing
You have the right to withdraw your consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
5.9 Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for entering into or performing a contract between you and the controller;
(2) is authorised by Union or Member State law to which the controller is subject and that law lays down suitable measures to safeguard your rights, freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2)(a) or (g) applies and suitable measures have been taken to safeguard your rights, freedoms and legitimate interests. In the cases referred to in (1) and (3), the controller will implement suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
5.10 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
6. Joint controllership
Where an ADAC regional club acts as an intermediary for a ferry booking, joint controllership exists pursuant to Article 26 GDPR.
Controllers:
The following are responsible for data processing:
ADAC Travel & Event Mittelrhein GmbH, represented by its Managing Directors Marc Hennerici, Georg Fuchs, Viktoriastraße 15, 56068 Koblenz
and
the respective regional club within the ADAC network acting as intermediary. (see here)
This constitutes joint controllership pursuant to Article 26 GDPR. The corresponding data protection arrangements have been concluded between the controllers in accordance with Article 26 GDPR.
Which stages of the process are subject to joint controllership?
| Processing activity/purpose | Sole controller (Article 4(7) GDPR) or joint controllers (Article 26 GDPR) | Primary responsibility for data subject rights under Articles 12–21 GDPR |
| Collection of booking-related data | Jointly | Jointly |
| Collection of data through marketing campaigns | Jointly | Jointly |
| ADAC Travel & Event newsletter | ADAC Travel & Event | ADAC Travel & Event |
| Transfer and storage of booking-related data | Jointly | Jointly |
| Processing customer bookings | ADAC Travel & Event | ADAC Travel & Event |
| Call centre for receiving ferry bookings | ADAC Travel & Event | ADAC Travel & Event |
| Sending booking documents, invoices and tickets | ADAC Travel & Event | ADAC Travel & Event |
| Debt collection process | ADAC Travel & Event | ADAC Travel & Event |
Purposes of processing, legal bases and data subject rights:
Your personal data is processed to perform the contract concluded with you for arranging and settling a ferry contract with the respective ferry company (Article 6(1)(b) GDPR). We also process your data to inform you, as our customer, about further offers for ferry travel. The legal basis is Article 6(1)(f) GDPR (legitimate interest). If you do not wish to be contacted further, please let us know at [email protected]. Only the data you have provided to us is processed. To perform the contract, we require, in particular, the first names and surnames of travellers, your address details, information about the itinerary and vehicles to be used, and data required to process payment. Your data is used to book and settle payment for the ferry journey. During the booking process, we pass the necessary data to the ferry company. In some cases, we must also pass data to other service providers because booking directly with the ferry companies is not possible. In these cases, we guarantee compliance with all data protection requirements. Upon request, we will be happy to inform you whether your booking required data to be passed to a service provider and which provider was involved. We also pass your data to payment processing companies and banks to process payment.
The parties inform each other without undue delay of rights asserted by data subjects. They provide each other with all information necessary to respond to requests for access.
Data protection rights may be exercised with either ADAC Travel & Event Mittelrhein GmbH or the listed regional clubs. As a general rule, however, data subjects receive the information from the entity responsible for handling their rights under the agreement concluded pursuant to Article 26.
7. Newsletter
General terms of use and data protection information for ADAC newsletters.
Our newsletters provide the following content: information about ferry bookings and travel.
Only the following terms of use apply:
I. Terms of use:
1. Registration for the newsletter uses the double opt-in procedure. You sign up for the newsletter subscription using your email address. An email is then automatically sent to the email address provided. By replying to this email, you confirm your registration for the ADAC newsletter subscription. This procedure prevents someone from registering another person’s email address for the newsletter subscription without authorisation or by mistake.
2. Once registration is complete, you will receive the newsletter. This service is provided free of charge by ADAC Travel & Event Mittelrhein GmbH. The subscriber may cancel the subscription at any time without a notice period. To cancel your subscription, click the “Unsubscribe from newsletter” button in the newsletter. If your address changes, click the “Change details” button.
3. The newsletter may only be published in its entirety and with ADAC’s prior permission. Private, non-commercial forwarding is permitted. Where trademarks (names and/or logos) are displayed in the newsletter, please note that, as a general rule, they may only be used by the owner of the respective trademark.
4. The newsletter is prepared with the greatest care. Nevertheless, we ask for your understanding that we limit our liability in this context as follows: we are liable for any damage you suffer as a result of our newsletter (including, but not limited to, damage caused by inaccurate or incomplete information or damage to your hardware and/or software caused by our newsletter) only if it was caused intentionally or through gross negligence. This limitation of liability does not apply in the event of a breach of a material contractual obligation or damage arising from injury to life, body or health. In the event of a negligent breach of material contractual obligations by ADAC, liability for financial loss and property damage is limited to the typical, foreseeable damage.
5. The responsible contact for the ADAC newsletter is: ADAC Travel & Event Mittelrhein GmbH, email: [email protected]
II. Data protection information:
1. We process the email address and name you provide when subscribing to the newsletter in order to send you this newsletter regularly.
2. The legal basis for processing the email address you provide is your consent pursuant to Article 6(1)(a) of the EU GDPR. We obtained and documented this consent using the double opt-in procedure.
No data is passed to third parties in connection with data processing for sending newsletters. The data is used exclusively to send the newsletter.
3. You have the right to withdraw your consent to receiving the newsletter at any time with future effect. To do so, please use the “Unsubscribe from newsletter” button. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. You will be removed from the mailing list immediately after unsubscribing via “Unsubscribe from newsletter”.
Alternatively, you may contact us at any time, stating the email address you used and the reference “Newsletter cancellation” (see the contact options below):
• By post: ADAC Travel & Event Mittelrhein GmbH, Viktoriastr. 15, 56068 Koblenz.
• By email: [email protected]
4. This website uses Rapid Mail to send newsletters. The provider is Rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau. Rapid Mail is a service that can be used to organise and analyse newsletter distribution. The data you enter to receive the newsletter (e.g. your email address) is stored on Rapid Mail’s servers in Germany.
Newsletters sent using Rapid Mail allow us to analyse the behaviour of newsletter recipients. This includes analysing how many recipients opened the newsletter and how often individual links in the newsletter were clicked. Further information about data analysis through Rapid Mail newsletters is available at https://www.rapidmail.de/dsgvo-konformes-email-marketing
Data is processed on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time by unsubscribing from the newsletter. Withdrawal does not affect the lawfulness of data processing already carried out.
If you do not want analysis by Rapid Mail, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter. You can also unsubscribe directly on the website.
The data you provide to us for receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe, and is deleted from the newsletter mailing list after you unsubscribe. Data stored by us for other purposes is not affected.
After you have been removed from the newsletter mailing list, your email address may be stored by us or the newsletter service provider in a blocklist to prevent future mailings. Data in the blocklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage in the blocklist is not subject to a time limit. You may object to this storage if your interests override our legitimate interest.
5. Contact
The responsible contact is ADAC Fähren [email protected]
6. You will be removed from the mailing list immediately after unsubscribing via “Unsubscribe from newsletter”. The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
If you send us your withdrawal by post or email, immediate implementation cannot be guaranteed.
Behavioural information (open rates and click rates) is pseudonymised following withdrawal and deleted after no more than three calendar years.
Your consent and the withdrawal of consent are retained indefinitely for evidential purposes.
The message history is deleted one year after withdrawal of consent.
8. Service providers
If we use commissioned service providers for individual functions of our services, we will inform you about the respective processing operations.
We use service providers for the following purposes:
- Carrying out print jobs
- Marketing activities
- Support and maintenance of data processing services
- Website hosting
Use of Cloudflare
We use the “Cloudflare” service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).
Cloudflare provides a globally distributed content delivery network with DNS. Technically, information transfers between your browser and our website are routed through Cloudflare’s network. This enables Cloudflare to analyse traffic between your browser and our website and to act as a filter between our servers and potentially malicious Internet traffic. Cloudflare may also use cookies or other technologies to recognise Internet users, but these are used solely for the purpose described here.
The use of Cloudflare is based on our legitimate interest in providing our online services as securely and with as few errors as possible (Article 6(1)(f) GDPR).
Data transfers to the USA are based on the European Commission’s standard contractual clauses.
Details are available here:
https://www.cloudflare.com/privacypolicy/.
Further information on security and data protection at Cloudflare is available here:
https://www.cloudflare.com/privacypolicy/.
Processing on behalf of the controller
We have concluded a data processing agreement (DPA) with the provider named above. This is an agreement required under data protection law that ensures the provider processes the personal data of visitors to our website only in accordance with our instructions and in compliance with the GDPR.