Privacy policy

This privacy policy aims to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”). Personal data includes all data that has a personal reference to you, such as name, address, email address, or your user behavior. The privacy policy applies to all data processing operations carried out by us, both in the context of our core activities and for the online media we provide.

Who is responsible for data processing with us

Responsible for data processing is:

Sole proprietorship – brandoz.eu

Jörg Allmannsberger

Südtsr. 116
53175 Bonn

Germany

Phone: +49 228 61967990

Email: office@ultra-kroatien.de

Processing your data within the core activities of our company

If you are our user, the nature, scope, and purpose of processing your data depend on the contractual or pre-contractual relationships between us. In this sense, the data processed by us includes all the data provided or required for the purpose of using contractual or pre-contractual services and for processing your request or the contract concluded between us. Unless otherwise stated in the further information in this privacy policy, the processing and sharing of your data with third parties are limited to those data necessary and appropriate for answering your inquiries and/or fulfilling the contract concluded between you and us, protecting our rights, and fulfilling legal obligations. We will inform you of the data required for this purpose before or during the data collection. If we use third-party providers to provide our services, the data protection notices of the respective third-party providers apply.

Affected data:

  • Inventory data (e.g., names, addresses)
  • Payment data (e.g., bank details, invoices)
  • Contact data (e.g., email address, phone number, postal address)
  • Contract data (e.g., contract subject, contract duration)

Affected individuals: Customers, prospects, business and contract partners

Purpose of processing: Execution of contractual services, communication, answering contact inquiries, office and organizational procedures

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the responsible party mentioned in item 1 of this privacy policy:

      • Right to Information: You have the right to request information from us about whether and which data we process about you.
      • Right to Rectification: You have the right to request the correction of incorrect or completion of incomplete data.
      • Right to Deletion: You have the right to request the deletion of your data.
      • Right to Restriction: You have the right, in certain cases, to request that we only process your data to a limited extent.
      • Right to Data Portability: You have the right to request that we transmit your data to you or another controller in a structured, common, and machine-readable format.
      • Right to Complain: You have the right to complain to a supervisory authority. The competent authority is the supervisory authority at your usual place of residence, your place of work, or our company headquarters.

Right of Withdrawal

You have the right to withdraw your consent to data processing at any time.

Right to Object

You have the right to object at any time to the processing of your data, which we base on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. If you make use of your right to object, we ask you to explain the reasons. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please direct your objection to the contact address of the responsible party mentioned above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that, unless otherwise stated in the individual privacy notices of this privacy policy, we delete your data,

      • when the purpose of data processing has ceased to exist, and thus the respective legal basis mentioned in the individual privacy notices no longer applies, for example,
        • upon termination of our existing contractual or membership relationships (Art. 6 para. 1 lit. a GDPR) or
        • when our legitimate interest in further processing or storage of your data ceases to exist (Art. 6 para. 1 lit. f GDPR),
        • when you exercise your right of withdrawal, and there is no other legal basis for processing under Art. 6 para. 1 lit. b-f GDPR,
        • when you exercise your right to object, and there are no compelling legitimate grounds for the processing.

If we (certain parts of) your data still need to be retained for other purposes, such as tax retention periods (usually 6 years for business correspondence or 10 years for booking documents), or for the assertion, exercise, or defense of legal claims from contractual relationships (up to four years), or if the data is needed to protect the rights of another natural or legal person, we will only delete (the part of) your data after the expiration of these periods. Until these deadlines expire, we limit the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the device you are using. Cookies primarily serve to exchange information between the device you are using and our website. This includes, among other things, language settings on a website, login status, or the location where a video was watched.

Two types of cookies are used when visiting our websites:

  • Temporary Cookies (Session Cookies): These store a so-called session ID, which allows various requests from your browser to be assigned to the common session. Session cookies are deleted when you log out or close your browser.
  • Permanent Cookies: Permanent cookies remain stored even after closing the browser. This allows our website to recognize your computer when you return to our website. Information such as language settings or login information is stored in these cookies. Furthermore, your surfing behavior can be documented and stored with these cookies. This data can be used for statistical, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished based on their purpose:

  • Necessary Cookies: These are cookies that are absolutely necessary for the operation of our website, to store logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
  • Statistics, Marketing, and Personalization Cookies: These are cookies used for analytical purposes or for measuring reach. Such “tracking” cookies may store information about entered search terms or the frequency of page views. In addition, the surfing behavior of an individual user (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. If we use services that store cookies on your device for statistical, marketing, and personalization purposes, we will inform you separately in the following sections of our privacy policy or as part of obtaining your consent.

Affected data:

  • Usage data (e.g., access times, clicked websites)
  • Communication data (e.g., information about the device used, IP address).

Affected individuals: Users of our online offerings

Purpose of processing: Serving our websites, ensuring the operation of our websites, improving our internet offering, communication, and marketing

Legal basis:
Legitimate Interest, Art. 6 para. 1 lit. f GDPR

If we do not obtain your consent for setting cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, particularly the content and features. You have the option to object to the use of cookies set by us within the security settings of your browser. There, you can decide whether to accept no cookies at all or only cookies on request, or specify that cookies are deleted after each closing of your browser. If cookies are disabled for our website, some functions of the website may no longer be fully available.

Consent, Art. 6 para. 1 lit. a GDPR

If we ask you before your visit to our website to allow certain cookies to be set on your device, and you consent to this, the legal basis is to be seen in the consent you have given. We will inform you during the consent about which cookies we set in detail. If you do not give this consent, only the so-called technically necessary cookies, which are required for the proper operation of our websites and their display in your browser, will be set. If you have consented to the setting of cookies, you have the option to revoke the consent granted to us at any time.

Web Hosting

We use a provider to host our websites, on whose servers our websites are stored and made available for retrieval on the internet (hosting). In this process, the provider may process data transmitted by your browser when using our websites. This includes, in particular, your IP address, which the provider needs to deliver our online offering to the browser you are using, as well as all inputs made by you on our website. In addition, the provider we use may collect

  • the date and time of access to our website
  • time zone difference to Greenwich Mean Time (GMT)
  • access status (HTTP status)
  • the amount of data transmitted
  • the internet service provider of the accessing system
  • the type and version of the browser used by you
  • the operating system used by you
  • the website from which you may have come to our website, if applicable
  • the pages or subpages you visit on our website

These data mentioned above are stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.

Affected data:

  • Content data (e.g. posts, photos, videos)
  • Usage data (e.g. access times, clicked pages)
  • Communication data (e.g. information about the device used, IP address)

Affected individuals: Users of our website

Purpose of processing: Displaying our websites, ensuring the operation of our websites

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web hoster commissioned by us:

Vautron

Service provider: Vautron
Data center AG Obermünsterstr. 9 93047 Regensburg

Website: https://www.vautron.de/

Data protection declaration: https://www.vautron.de/datenschutz

Contact

If you contact us via email, social media, telephone, fax, post, our contact form, or in any other way and provide us with personal data such as your name, telephone number, or email address, or make further statements about yourself or your concern, we process this data to respond to your request within the existing pre-contractual or contractual relationship between us.

Affected data:

  • Master data (e.g. names, addresses)
  • Contact data (e.g. email address, telephone number, postal address)
  • Content data (texts, photos, videos)
  • Contract data (e.g. subject matter of the contract, duration of the contract)

Affected individuals: Interested parties, customers, business and contractual partners

Purpose of processing: Communication and answering of contact inquiries, office and organizational procedures

Legal basis: Contract fulfillment and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Information about Third-Party Providers Used by Us:

Fluent Forms

Service provider: WPManageNinja located at 2035 Sunset Lake Road, Suite B-2, Newark, 19702, USA

Website: https://fluentforms.com/

Data protection declaration: https://wpmanageninja.com/privacy/

Newsletter

We regularly send out a newsletter to inform our customers, business partners, and interested parties about our offers and related news. You have the option to subscribe to our newsletter on our website and consent to receiving the newsletter as part of the registration. Providing your email address is mandatory when signing up for our newsletter. We store the email address to be able to send you the newsletter. Once you subscribe to our newsletter, you will receive a confirmation email to the email address provided during registration in the double opt-in procedure. This email contains a link. By clicking on this link, you confirm that you want to receive the newsletter. This ensures that your email address was not abused by a third party during registration. For the same reason, we also store the date and time of registration as well as the IP address assigned to you during registration. The aforementioned data is not disclosed to third parties.

Affected data:

      • Content data (e.g., posts, photos, videos)
      • Usage data (e.g., access times, clicked websites)
      • Communication data (e.g., information about the device used, IP address)

Affected individuals: Users of our website

Purpose of processing: Displaying our websites, ensuring the operation of our websites

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Deletion: The deletion of the email address occurs either if, within 1 month after sending the confirmation email in the double opt-in procedure, you have not clicked on the confirmation link, or immediately after you have unsubscribed from our newsletter.

Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter subscription. We offer the following options through which you can declare your revocation:

Mailchimp

Service provider: “Mailchimp” – Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA

Website: https://mailchimp.com

Data protection declaration: https://mailchimp.com/legal/privacy/

Affiliate Programs and Affiliate Links

We use affiliate links and/or other types of affiliate references, such as search masks, widgets, or discount codes on our website. These links and references lead you to offers and services from third-party providers. If you click on one of these links or take advantage of one of these offers, we receive a commission or other benefit from the respective third-party provider.

In order for us to receive our commission, the relevant third-party providers must be informed that you have used an affiliate link on our website. For this purpose, the affiliate links used must be traced back and assigned to the respective transactions or other actions, such as purchases. This process is necessary to settle our commission with the third-party provider. The data collected by us in the course of this process is stored until the final settlement.

To ensure an assignment between the affiliate link, transaction, and you as the user, the affiliate links used by us may be supplemented with certain information. This information can be stored in the link itself or in a cookie. This information may include the originating website (referrer), the online identification code of our website, an online identification code of the respective offer, the type of affiliate link used, the type of offer, an online identification code of the respective user, and the time of use of the link.

Affected data:

      • Usage data (e.g., previously visited websites, usage times, interest in content),
      • Business transaction data (e.g., duration, customer category, contract subject),
      • Communication and metadata (e.g., IP address, information about the device or computer system)

Processing Purpose: Recording which affiliate links embedded on our website were used by our visitors

Legal Basis: Consent, Art. 6(1)(a) GDPR, Contract performance and pre-contractual inquiries, Art. 6(1)(b) GDPR, Legitimate interest, Art. 6(1)(f) GDPR

Revocation Options: You have the option to deactivate interest-based advertising by adjusting settings at the following link: http://www.aboutads.info/choices. Additionally, you can prevent the storage of cookies by adjusting settings in your browser. Cookies already set can be deleted by you at any time.

We use the following affiliate service providers:

Travelpayouts

Service Provider: Go Travel Un Limited; Hong Kong/ China

Website: https://www.travelpayouts.com/

Privacy Policy: https://support.travelpayouts.com/hc/en-us/articles/360004121052/

Web Analytics and Statistics

To capture and statistically evaluate visitor flows on our website, we use web analytics services. These services collect data, including information about the internet page from which you accessed our site (referrer), which pages of our site you accessed, the duration of your visit, and your interactions on those pages. Additionally, data about your browser, computer system, and device type are collected. Moreover, such services may capture demographic information such as age or gender as pseudonymous values. If you have consented to the collection of your location data, it may also be processed by the service provider, depending on the provider.

To collect and store this data, the web analytics service we use typically places a cookie on the device you use, through which your associated IP address is also collected. However, this IP address is shortened using a process called IP masking, making it no longer attributable to your visit to our website. Furthermore, no clear data such as names or email addresses are stored, neither by us nor the service we use. Neither we nor the service we use knows the identity of the visitors to our websites.

We would like to inform you that, depending on the location of the service provider mentioned below, the data collected by the service may be transferred and processed outside the European Union. In this case, there is a risk that the data protection level prescribed by the GDPR may not be adhered to, and the enforcement of your rights may be difficult or only possible with limitations.

Affected Data:

  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., information about the device used, IP address)

Affected Persons: Users of our online offerings

Processing Purpose: Reach measurement, campaign success control, remarketing, and interest- and behavior-based marketing

Legal Basis: If we have asked for your consent before using the respective service, this is the legal basis, Art. 6(1)(a) GDPR. Otherwise, we use the respective service based on our legitimate interest in analyzing visitor flows on our websites to continuously improve functions, offers, and the user experience, Art. 6(1)(f) GDPR.

We use the following web analytics services:

Google Analytics

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU Headquarters: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://marketingplatform.google.com/intl/de/about/analytics/

Privacy Policy: https://policies.google.com/privacy?hl=de

Opt-Out Option: If you do not want your data to be used by Google Analytics, you can install an opt-out plugin that will prevent your data from being collected on our website in the future. You can obtain this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Content Services

We use certain services to deliver specific content or graphics (videos, images, music, fonts, maps) on our website. The services we use process your IP address assigned to you at the time of your visit to our websites, as this is necessary for displaying the respective content in your browser. In addition, the providers of these services may set additional cookies on your device to collect information about your usage behavior, interests, the device you use, the browser you use, as well as the time and duration of your session. These data are regularly used by the providers for analysis, statistics, and marketing purposes. Furthermore, this information may be linked with information from other sources, especially if you have an account with the service provider and are logged in during your session.

We would like to point out that, depending on the location of the service provider mentioned below, the data named below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the data protection level prescribed by the GDPR may not be adhered to, and the enforcement of your rights may be difficult or only possible with limitations.

Affected Data:

  • Usage data (e.g., access times, clicked pages)
  • Communication data (e.g., information about the device used, IP address)

Affected Persons: Users of our website

Processing Purpose: Displaying our websites, offering content, ensuring the operation of our websites

Legal Basis: Consent via cookie consent banner, Art. 6(1)(a) GDPR, Legitimate interests, Art. 6(1)(f) GDPR

We use the following content services:

Google Maps

We use Google Maps on our website. Google collects and processes the visitor’s IP address. When you visit a webpage with embedded Google Maps, regardless of whether you actually use Google Maps or are logged into your Google Account, your IP address and location data (usually not without your consent) are transmitted to Google. Your IP address is associated with your Google Account if you are logged in during your visit to our website.

Service Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://www.google.de/maps

Privacy Policy: https://policies.google.com/privacy

Opt-Out Option:
https://tools.google.com/dlpage/gaoptout?hl=de

Google Web Fonts

With Google Web Fonts, we can integrate fonts (web fonts) into the design of our website and display them correctly in your browser when viewing our websites. The Google Web Fonts are provided by the search engine Google. However, these web fonts are not loaded from Google servers but are locally loaded from our servers. This means that no data is transmitted to Google anymore.

Service Provider for Google Web Fonts:

Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

EU Headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Website: https://fonts.google.com/

YouTube

We use components from YouTube on this website to embed videos that can be played through your internet browser when you visit our websites. During your visit to our websites, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google’s external servers in the USA. This information transmission occurs regardless of whether the displayed videos are actually viewed or clicked or whether you are logged into your YouTube or Google Account. This information is collected and associated with your Google Account if you are logged in when visiting our websites.

Service Provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

Website: https://www.youtube.com/

Privacy Policy: https://policies.google.com/privacy

Opt-Out Option:
https://tools.google.com/dlpage/gaoptout?hl=de


Security Measures

In addition, we implement technical and organizational security measures according to the state of the art to comply with the provisions of data protection laws and protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

Currentness and Amendment of this Privacy Policy

This privacy policy is currently valid and has the status of January 2024. Due to changed legal or regulatory requirements, it may be necessary to adapt this privacy policy.

This privacy policy was created with the assistance of the privacy policy generator from SOS Recht. SOS Recht is an offering from Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.