Privacy policy

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the controller” in this privacy policy.

How do we collect your data? Some data is collected because you provide it to us, for example when you send us an email. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data such as your browser, operating system or the time of the page request. This data is collected automatically as soon as you enter this website.

What do we use your data for? Part of the data is collected to ensure the website is provided without errors. No analysis of your user behaviour takes place.

What rights do you have regarding your data? You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have a right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding this and any other questions on data protection.

We have concluded a data processing agreement (DPA) with the provider named above. This is a contract required by data protection law which ensures that they process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

No personal data is transferred outside the European Union as part of hosting. For embedded map material, see the sections “Transfer of data to the USA and other third countries” and “Google Maps”.

The controller for data processing on this website is:

Jan-Paul Braack, Streitberg 17, 24113 Molfsee, Germany

Phone: +49 171 8377835

Email: kontakt@janpaulbraack.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it, such as retention periods under tax or commercial law; in the latter case, deletion takes place once those reasons cease to apply.

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR where special categories of data under Art. 9 (1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, processing also takes place on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to access to information on your device, processing additionally takes place on the basis of § 25 (1) TDDDG. Consent may be withdrawn at any time. Where your data is necessary for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. Furthermore, we process your data where it is necessary for compliance with a legal obligation, on the basis of Art. 6 (1) (c) GDPR. Processing may also take place on the basis of our legitimate interest under Art. 6 (1) (f) GDPR. Information on the legal bases relevant in each individual case is provided in the following paragraphs of this privacy policy.

In the course of our activity we work with various external parties. This sometimes requires the transfer of personal data to those parties. We pass personal data to external parties only where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest under Art. 6 (1) (f) GDPR in the transfer, or where another legal basis permits it. When using processors, we pass on personal data only on the basis of a valid data processing agreement.

Individual articles embed the Google Maps mapping service. If you load a map, personal data — in particular your IP address — may be transferred to and processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We point out that the United States cannot guarantee a level of data protection matching European standards in every respect. In particular, access to personal data by US authorities cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission established an adequate level of protection in its adequacy decision of 10 July 2023.

The transfer takes place only after you have loaded a map by clicking it and thereby consented (Art. 6 (1) (a) GDPR, Art. 49 (1) (a) GDPR). As long as you do not click a map, no transfer occurs. Apart from this, no data is transferred to third countries.

Many data processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of the processing carried out until withdrawal remains unaffected.

IF DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 (2) GDPR).

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

The authority competent for us is the Independent Centre for Privacy Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein), Holstenstraße 98, 24103 Kiel, Germany.

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place where technically feasible.

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the processing, and where applicable a right to correction or deletion of this data. You can contact us at any time regarding this and any other questions on personal data.

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of the personal data we hold about you, we usually need time to verify this. For the duration of that examination you have the right to request restriction of processing.

If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.

If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction of processing instead of deletion.

If you have lodged an objection under Art. 21 (1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing.

If you have restricted the processing of your personal data, that data may — apart from being stored — only be processed with your consent or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

Cookies are small data packets and do no harm to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain on your device until you delete them yourself or your browser deletes them automatically.

Simply reading this website sets no cookies. No analytics or tracking services are embedded, and no fonts or scripts are loaded from external servers. Third-party cookies arise only if you explicitly load a map in an article; Google may set its own cookies at that point (see the “Google Maps” section).

Cookies are set exclusively in the editorial area under /admin, which only signed-in editors can reach. There are two: a session cookie that maintains the sign-in, and a cookie holding a token that protects against cross-site request forgery. Both are strictly necessary for the operation of the editorial area and are therefore stored without consent pursuant to § 25 (2) no. 2 TDDDG. The legal basis is Art. 6 (1) (f) GDPR. Visitors to the public pages receive no cookies, which is why no consent banner is required.

If you contact us by email or telephone, your enquiry including all personal data arising from it will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

Processing of this data is based on Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this was requested; consent may be withdrawn at any time.

The data you send us remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing it no longer applies. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

This site links to external offerings, among them social media profiles as well as booking sites operated by airlines and travel providers. These are plain links; a connection to the respective provider is established only once you click the link. From that point onwards their privacy policies apply. Content from these providers is not embedded in our pages unasked — the one exception is the map material described in the following section, which likewise loads only once you click it.