Data Protection

Templates for creating this privacy policy

Sample data protection declaration of the law firm Weiß & Partner

Data protection declaration generator of activeMind AG

Personal data (hereinafter mostly referred to as “data”) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. In addition, we inform you below about the data we use for optimization purposes and to increase the quality of use.

In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our privacy policy is structured as follows

I. Information about us as the controller
II. rights of users and data subjects
III. Information on data processing

I. Information about us as the controller

Sky Paths Coordination, c/o Kulturbetriebe Burgenlandkreis GmbH (Nebra Ark and Goseck Solar Observatory divisions)
An der Steinklöbe 16
D-06642 Nebra

Telephone: +49 (0)34461 2552 0
Fax: +49 (0)34461 2552 17
E-mail: info(at)himmelsscheibe-erleben.de

Represented by:
Bettina Pfaff, Managing Director

II Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

   to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR)
   to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR)
   the immediate erasure of the data concerning them (see also Art. 17 GDPR) or, alternatively, if further processing is required pursuant to Art. 17 (3) GDPR, the restriction of processing in accordance with Art. 18 GDPR;
   to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (cf. also Art. 20 GDPR)
   to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection regulations (see also Art. 77 GDPR).

Translated with DeepL.com (free version)

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data, or restriction of processing, carried out pursuant to Articles 16, 17(1), 18 GDPR. However, this obligation does not apply insofar as such notification is impossible or involves disproportionate effort. Nevertheless, the user has the right to information about these recipients.   

Likewise, users and data subjects have the right to object, pursuant to Article 21 GDPR, to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.   

III. Information on Data Processing

Your data processed when using our website will be erased or blocked as soon as the purpose of storage ceases to apply, the erasure of the data is not contrary to any statutory retention obligations, and no different information is provided below regarding individual processing procedures.  

Server Data

For technical reasons, particularly to ensure a secure and stable website, data is transmitted by your internet browser to us or to our web space provider. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the websites of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which the use of our website is made.

This data collected is temporarily stored, but not together with other data of yours.   

This storage is based on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. 

The data will be deleted no later than seven days, unless further retention is necessary for evidentiary purposes. Otherwise, the data will be wholly or partially excluded from deletion until the final clarification of an incident.   

Cookies

a) Session Cookies

We use cookies on our website. Cookies are small text files or other storage technologies placed and stored on your device by your web browser. These cookies process certain information, such as your browser or location data and IP address, to enhance the usability, efficiency, and security of our website. For example, cookies allow our website to be displayed in different languages or enable shopping cart functionality.

The legal basis for this processing is Article 6(1)(b) of the GDPR, provided the data processing is necessary for contract initiation or fulfillment.

If processing is not required for contract-related purposes, our legitimate interest lies in improving the functionality of our website, making Article 6(1)(f) of the GDPR the applicable legal basis.

Session cookies are deleted when you close your browser.

b) Third-Party Cookies

Our website may also use cookies from partner companies for advertising, analytics, or functionality purposes.

For details about these third-party cookies, including their purposes and legal basis, please refer to the following sections.

c) Disabling Cookies

You can prevent or restrict the installation of cookies by adjusting your browser settings. Additionally, you can delete stored cookies at any time. The necessary steps depend on the browser you are using. Please consult your browser’s help function or documentation for instructions. If you need assistance, you can contact your browser’s manufacturer or support service.

Flash cookies cannot be managed through browser settings; instead, you must modify your Flash Player settings. The specific steps depend on your Flash Player version, so refer to its documentation or contact the manufacturer for support.

Please note that restricting or disabling cookies may limit some functions of our website.

Contract Processing

The data you provide to use our products and services is processed for contract execution and is necessary for that purpose. Without this data, we cannot conclude or fulfill a contract.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

We delete the data once the contract has been fully executed, while complying with tax and commercial retention periods.

As part of contract fulfillment, we may share your data with logistics providers for order delivery or financial service providers for payment processing if necessary.

The legal basis for this data transfer is also Article 6(1)(b) of the GDPR.

Contact Requests/Contact Options

If you contact us via the contact form or email, the data you provide will be used to process your request. Providing this data is necessary for us to handle and respond to your inquiry—without it, we may not be able to process your request or may only be able to do so in a limited capacity.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

Your data will be deleted once your request has been fully processed, provided there are no legal retention obligations preventing its deletion, such as those related to a subsequent contractual agreement.

Social Plugins

Our website uses social plugins from the providers listed below. These plugins can be identified by their respective logos.

Through these plugins, information—including personal data—may be transmitted to the service provider and potentially used by them. To prevent unintentional data collection and transmission, we use a two-click solution. A social plugin must first be activated by clicking on the corresponding button before any data is collected or transmitted. Only after activation will the plugin collect and transmit information to the respective service provider. We do not collect personal data through social plugins or their use.

We have no control over the data collected by an activated plugin or how the provider processes it. It is assumed that activating a plugin establishes a direct connection to the provider’s services, collecting at least the user's IP address and device-related information. Additionally, service providers may attempt to store cookies on the user's device. For details on the specific data collected and its usage, please refer to the privacy policies of the respective providers.

Note: If you are logged into Facebook while visiting our site, Facebook may be able to identify you as a visitor to a specific page.

We have integrated social media buttons from the following companies on our website:

"Facebook" Social Plugin

Facebook is an online service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter collectively referred to as "Facebook."

By being certified under the EU-US Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Facebook guarantees compliance with EU data protection regulations when processing data in the United States.

The legal basis for this processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website.

Further details about the available plugins and their respective functionalities can be found on Facebook’s developer page:

https://developers.facebook.com/docs/plugins/

Information regarding data collection, usage, and your associated rights and privacy options can be found in Facebook’s privacy policy:

https://www.facebook.com/policy.php

Matomo (formerly: PIWIK)

We use Matomo (formerly known as "PIWIK") on our website. This is an open-source software that allows us to analyze the use of our website. The data processed includes your IP address, the website(s) you visit within our online presence, the website from which you accessed our website (referrer URL), the duration of your visit to our website, and the frequency of visits to one of our web pages.

To collect this data, Matomo stores a cookie on your device via your internet browser. This cookie remains valid for one week.

The legal basis for this processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis and optimization of our website.

If you do not agree to this processing, you have the option to prevent the storage of cookies by adjusting the settings in your internet browser. 

Additionally, you have the option to opt out of the analysis of your usage behavior. By confirming the link at the end of the privacy policy, a cookie will be stored on your device via your internet browser, preventing further analysis. However, please note that if you delete the cookies stored on your device, you will need to click the opt-out link again.