Privacy and Cookies Policy

privacy

 

1. PRIVACY AT A GLANCE

 

We take the protection of the data of users of our website and our mobile app very seriously and are committed to protecting the information that users provide to us in connection with the use of our website and our mobile app (collectively: "digital assets") , to protect. Furthermore, we are committed to protecting and using your information in accordance with applicable law.

 

This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information through the use of our digital assets when you access the Services through your devices. Personal data is all data with which you can be personally identified.

 

Please read the Privacy Policy carefully and ensure you fully understand our practices regarding your information before using our Services. If you have read and fully understood this policy and do not agree with our practices, you must stop using our digital assets and services.

 

By using our services, you accept the terms of this privacy policy. Continued use of the Services constitutes your acceptance of this Privacy Policy and any changes thereto.

 

In this privacy policy you will learn:

 

• Who is responsible for data collection

• What data we collect

• How we collect data

• Why we collect this data

• Who we share the data with

• Where the data is stored

• How long the data is retained

• How we protect the data

• How we deal with minors

• Your rights

• Cookie Policy

• Updates or changes to the Privacy Policy

 

 

Who is responsible for data collection on this website?

 

The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

 

What data do we collect?

 

Below is an overview of the data we may collect:

 

• Unidentified and non-identifiable information that you provide during the registration process or that is collected through the use of our Services ("Non-Personally Identifiable Information"). Non-personal data do not allow any conclusions as to who collected them. Non-Personally Identifiable Information that we collect consists primarily of technical and aggregate usage information.

 

• Individually identifiable information, meaning anything from which you can be identified or could be identified with reasonable effort (“Personal Information”). The Personal Information we collect through our Services may include information requested from time to time, such as names, email addresses, addresses, phone numbers, IP addresses and more. If we combine personal information with non-personal information, we treat it as personal information for as long as it is combined.

 

How do we collect data?

 

Below are the main methods we use to collect data:

 

• We collect data when you use our services. Therefore, when you visit our digital assets and use the Services, we may collect, record and store usage, sessions and related information.

• We collect data that you provide to us yourself, for example if you contact us directly via a communication channel (e.g. an e-mail with a comment or feedback).

• We may collect information from third party sources as described below.

• We collect information that you provide to us when you log into our Services through a third party such as Facebook or Google.

 

Why do we collect this data?

 

We may use your data for the following purposes:

 

• to provide and operate our Services;

• to develop, customize and improve our Services;

• to respond to your feedback, requests and requests and to offer assistance;

• to analyze request and usage patterns;

• for other internal, statistical and research purposes;

• to improve our data security and fraud prevention capabilities;

• to investigate violations and enforce our terms and policies and to comply with applicable law, regulation or governmental request;

• to provide you with updates, news, promotional materials and other information related to our Services. In the case of promotional e-mails, you can decide for yourself whether you wish to continue to receive them. If not, just click the unsubscribe link in those emails.

 

Who do we share this data with?

 

We may share your data with our service providers in order to operate our services (e.g. storing data via third-party hosting services, providing technical support, etc.).

 

We may also disclose your information in the following circumstances: (i) to investigate, detect, prevent, or address unlawful activity or other wrongdoing; (ii) to establish or exercise our rights of defense; (iii) to protect our rights, property, or personal safety, or the safety of our users or the public; (iv) in the event of a change of control of us or any of our affiliated companies (by way of a merger, acquisition or purchase of (substantially) all assets, etc.); (v) to collect, hold and/or manage your data using authorized third party service providers (e.g. cloud service providers) as appropriate for business purposes; (vi) to work collaboratively with third parties to improve your user experience. To avoid misunderstandings, we would like to point out that we can transfer or pass on non-personal data to third parties or use them in any other way at our own discretion.

 

Please note that our Services enable social interactions (e.g. posting content, information and comments publicly and chatting with other users). We remind you that any content or data that you make available in these areas can be read, collected and used by other people. We do not recommend posting or sharing information that you do not want to make public. If you upload content to our digital assets or otherwise make it available as part of using any service, you do so at your own risk. We cannot control the actions of other users or members of the public with access to your data or content. You acknowledge and hereby acknowledge that copies of your data may remain accessible even after deletion on cached and archived pages or after a third party has made a copy/storage of your content.

 

Cookies and Similar Technologies

 

When you visit or access our Services, we authorize third parties to use web beacons, cookies, pixel tags, scripts, and other technologies and analytics services ("Tracking Technologies"). These Tracking Technologies may enable third parties to collect your information automatically in order to improve the browsing experience on our digital assets, to optimize their performance and to ensure a customized user experience, as well as for security and fraud prevention purposes.

 

To learn more about this, please read our cookie policy from point 3.

 

We will not share your email address or other personally identifiable information with any advertising company or advertising network without your consent.

 

Where do we store the data?

 

Non-Personally Identifiable Information

 

Please note that our companies and our trusted partners and service providers are located around the world. For the purposes explained in this Privacy Policy, we store and process all non-personal data that we collect in different jurisdictions.

 

Personal Data

 

Personal information may be maintained, processed and stored in the United States, Ireland, South Korea, Taiwan, Israel and as necessary for the proper provision of our Services and/or as required by law (as further explained below) in other jurisdictions.

 

How long is the data retained?

 

Please note that we retain the information we collect for as long as is necessary to provide our services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements.

 

We can correct, supplement or delete incorrect or incomplete data at any time at our own discretion.

 

How do we protect the data?

 

The hosting service for our digital assets provides us with the online platform through which we can offer our services to you. Your data may be stored through our hosting provider's data storage, databases and general applications. It stores your data on secure servers behind a firewall, and it offers secure HTTPS access to most areas of its services.

 

All payment options offered by us and our hosting provider for our digital assets comply with the regulations of the PCI-DSS (data security standard of the credit card industry) of the PCI Security Standards Council (council for security standards of the credit card industry). This is a collaboration between brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card data (including physical, electronic, and procedural controls) by our store and service providers.

Notwithstanding the measures and efforts taken by us and our hosting provider, we cannot and do not guarantee the absolute privacy or security of any information you upload, post or otherwise disclose to us or others.

 

For this reason, we would like to ask you to set strong passwords and, if possible, not to transmit to us or others confidential information, the disclosure of which you believe could cause serious or lasting harm to you. In addition, since email and instant messaging are not considered secure forms of communication, we ask that you do not share any confidential information through any of these communication channels.

 

How do we deal with minors?

 

The Services are not intended for users who have not yet reached the legal age of majority. We will not knowingly collect information from children. If you are under the age of majority, you should not download or use the Services or provide any information to us.

 

We reserve the right to request proof of age at any time so that we can verify that minors are using our Services. In the event that we become aware that a minor is using our Services, we may block or block access to our Services for such users and we may delete any information we hold about that user. If you have reason to believe that a minor has provided us with information, please contact us as set out below.

 

 

We will only use your personal information for the purposes set out in the Privacy Policy and only when we are satisfied that:

 

• the use of your personal information is necessary to perform or enter into a contract (e.g. to provide you with the Services themselves or to provide customer or technical support);

• the use of your personal data is necessary to comply with a relevant legal or regulatory obligation, or

• the use of your personal information is necessary to support our legitimate business interests (provided that we do so at all times in a way that is proportionate and respects your privacy rights).

 

As an EU resident you can:

 

• request confirmation as to whether or not personal data concerning you is being processed and request access to your stored personal data and certain additional information;

• request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format;

• request rectification of your personal data held by us;

• request the erasure of your personal data;

• object to our processing of your personal data;

• request the restriction of the processing of your personal data, or

• lodge a complaint with a supervisory authority.

 

However, please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. If you have general questions about the personal information we collect and how we use it, please contact us as provided below.

In the course of providing the Services, we may transfer information across borders to affiliates or other third parties and from your country/jurisdiction to other countries/jurisdictions around the world. By using the Services, you consent to the transfer of your information outside of the EEA.

 

If you are a resident of the EEA, your personal data will only be transferred to locations outside the EEA where we are satisfied that an adequate or comparable level of protection of personal data is in place. We will take appropriate steps to ensure that we have appropriate contractual arrangements in place with our third parties to ensure that appropriate safeguards are in place to minimize the risk of unlawful use, alteration, destruction, loss or theft of your personal information and that such third parties will act in accordance with applicable laws at all times.

 

California Consumer Protection Law Rights

 

If you are using the Services as a California resident, you may have rights under the California Consumer Privacy Act ("CCPA") to request access to and deletion of your information.

 

To exercise your right to access and delete your data, please see below how to contact us.

 

We do not sell users' personally identifiable information for the intent and purposes of the CCPA.

 

Users of the Services who are California residents and under the age of 18 may request and obtain removal of their posted content by emailing the address provided in the "Contact Us" section below. These requests must all be labeled "California Removal Request." All requests must include a description of the content you wish to remove and information sufficient to enable us to locate the material. We will not accept communications that are unidentified or improperly submitted, and we may not be able to respond if you do not provide sufficient information. Please note that your request does not ensure that the material will be completely or comprehensively deleted. For example, material you post may be republished or reposted by other users or third parties.

 

Contact

 

If you have general questions about the Services or the information we collect about you and how we use it, please contact us at:

 

Heike Ellwanger

Rüderner Strasse 37

73733 Esslingen

 

​Contact

E-mail:heike@dubai-golden-spots.com

 

The responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

 

What rights do you have regarding your data?

 

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

 

Analysis tools and third-party tools

 

When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this from point 5.

 

You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

 

​

 

2. GENERAL INFORMATION AND MANDATORY INFORMATION

 

privacy

 

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

 

If you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

 

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

 

​

Revocation of your consent to data processing

 

Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.

 

​

Right of appeal to the competent supervisory authority

 

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the responsible supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

​

Right to data portability

 

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.

 

 

SSL or TLS encryption

 

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

 

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

 

 

Encrypted payment transactions on this website

 

If, after the conclusion of a fee-based contract, there is an obligation to send us your payment data (e.g. account number for direct debit authorization), this data is required for payment processing.

 

Payment transactions using the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

 

With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

 

 

Information, blocking, deletion

 

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data.

 

 

Objection to advertising mails

 

We hereby object to the use of contact data published as part of the imprint obligation to send unsolicited advertising and information material. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam e-mails.

 

 

 

3. COOKIE POLICY

 

What is a cookie?

 

A cookie is a small file of letters and numbers that is downloaded onto your computer when users access certain websites. Typically, cookies enable a website to recognize a user's computer. Cookies do not damage your computer and do not contain viruses.

​

The most important thing to know about the cookies that are placed is that they make our website a little more user-friendly, effective and secure, e.g. B. by storing website preferences and language settings.

 

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

 

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

 

Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this data protection declaration.

 

 

Why do we use cookies?

 

We may use cookies and similar technologies for different purposes, such as: i) for security and fraud protection and to detect and prevent cyber-attacks; ii) to be able to provide selected services; iii) to monitor and analyze the performance, operation and effectiveness of our Services and iv) to improve user experience.

 

Options:

 

To learn more about cookies, including how to see what cookies have been set and how to manage, delete and block them, we recommend visitingwww.aboutcookies.orgorwww.allaboutcookies.org.

 

Alternatively, it is also possible for the browser to block cookies in general. To do this, users must change the cookie settings in their browser accordingly. These settings are usually located in the browser menu under "Options" or "Preferences".

 

Deleting our cookies or disabling future cookies or tracking technologies may result in certain areas or features of our Services becoming unavailable or otherwise impacting the user experience.

 

The following links may be useful, or alternatively the "Help" option in the browser.

 

Cookie settings in Firefox

 

Cookie settings in Internet Explorer

 

Cookie settings in Google Chrome

 

Cookie settings in Safari (OS X)

 

Cookie settings in Safari (iOS)

 

Cookie settings in Android

 

​

To refuse and prevent the use of your own data by Google Analytics on all websites, the following instructions exist:https://tools.google.com/dlpage/gaoptout.

 

 

Server log files

 

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

 

• Browser type and browser version

• operating system used

• Referrer URL

• Host name of the accessing computer

• Time of server request

• IP address

 

This data is not merged with other data sources.

 

The basis for data processing is Art. 6 Paragraph 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.

 

​

 

contact form

 

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

 

The processing of the data entered in the contact form is therefore exclusively based on your consent (Article 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation.

 

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

 

 

Registration on this site

 

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.

 

For important changes, such as the scope of the offer or technically necessary changes, we use the e-mail address provided during registration to inform you in this way.

 

The data entered during registration is processed on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke any consent you have given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation.

 

The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

 

 

Registration with Facebook Connect

 

Instead of registering directly on our website, you can register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

 

If you decide to register with Facebook Connect and click on the "Login with Facebook" / "Connect with Facebook" button, you will be automatically redirected to the Facebook platform. There you can log in with your usage data. This will link your Facebook profile to our website or services. This link gives us access to your data stored on Facebook. These are mainly:

 

• Facebook name

• Facebook profile and cover photo

• Facebook profile picture

• email address stored on Facebook

• Facebook ID

• Facebook friend lists

• Facebook Likes (“likes” information)

• birthday

• gender

• country

• language

 

This data is used to set up, provide and personalize your account.

 

For more information, see the Facebook Terms of Use and the Facebook Privacy Policy. You can find these at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

 

 

comment function on this website

 

For the comment function on this page, in addition to your comment, information about the time the comment was created, your e-mail address and, if you are not posting anonymously, the user name you have chosen will be stored.

 

Storage of the IP address

 

Our comment function saves the IP addresses of the users who write comments. Since we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

 

Subscribe to comments

 

As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails. In this case, the data entered when subscribing to comments will be deleted; if you have transmitted this data to us for other purposes and elsewhere (e.g. newsletter subscription), it will remain with us.

 

Storage duration of the comments

 

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

 

legal basis

 

The comments are stored on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke any consent you have given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

 

 

Processing of data (customer and contract data)

 

We collect, process and use personal data only insofar as they are necessary for the establishment, content or change of the legal relationship (inventory data). This is based on Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

 

The collected customer data will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

 

 

Data transmission upon conclusion of contract for services and digital content

 

We only transmit personal data to third parties if this is necessary within the framework of contract processing, for example to the bank responsible for processing payments.

 

Any further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

 

The basis for data processing is Art. 6 Paragraph 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.