The responsible party in the sense of data protection laws, particularly the EU General Data Protection Regulation (GDPR), is:
Georg Küster
Ammergasse 9-A
72070 Tübingen
Tel: 07071 - 77 00 60
Fax: 07071 - 76 04 36
E-Mail: contact[at]overcross.com
Your Rights as a Data Subject
You can exercise the following rights at any time by contacting our Data Protection Officer using the provided contact details:
- Access to your data stored with us and its processing (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Deletion of your data stored with us (Art. 17 GDPR),
- Restriction of data processing, insofar as we are not permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us consent, you may revoke it at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g., the competent supervisory authority of the federal state of your residence or the authority responsible for us as the data controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
Collection of General Information When Visiting Our Website
Type and Purpose of Processing:
When you access our website, i.e., when you do not register or otherwise transmit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar data.
It is processed particularly for the following purposes:
- Ensuring a smooth connection setup for the website,
- Ensuring a smooth use of our website,
- Evaluating the system security and stability, and
- Optimizing our website.
We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in anonymized form in order to optimize our online presence and the underlying technology.
Legal Basis and Legitimate Interest:
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Duration:
The data will be deleted as soon as they are no longer necessary for the purpose of collection. This applies in principle to data that serve the provision of the website when the respective session is finished.
In the case of storing data in log files, this occurs after a maximum of 14 days. Further storage is possible; in this case, the IP addresses of users are anonymized, making it no longer possible to assign the accessing client.
Provision Mandatory or Necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Additionally, certain services may not be available or may be restricted. For this reason, an objection is excluded.
Cookies
Like many other websites, we also use so-called "cookies." Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
You can delete individual cookies or the entire cookie inventory. Additionally, you will receive information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on your browser provider, you can find the necessary information at the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Storage Duration and Cookies Used:
To the extent that you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
Technically Necessary Cookies
Type and Purpose of Processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can also be identified after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for the users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.
We require cookies for the following applications:
Shopping cart
Adoption of language settings
Legal Basis and Legitimate Interest:
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in a user-friendly design of our website.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Provision Mandatory or Necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. Additionally, certain services may not be available or may be restricted.
Objection
Please read the information about your right to object according to Art. 21 GDPR further down.
Technically Non-Necessary Cookies
Furthermore, we use cookies to better align the offer on our website with the interests of our visitors or to improve it generally based on statistical evaluations.
Which providers set cookies can be found in the information provided below regarding the deployed representation, tracking, remarketing, and web analysis technologies.
Legal Basis:
The legal basis for these processing activities is your consent, Art. 6 (1) lit. a GDPR.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Further recipients can be found in the information provided below regarding the deployed representation, tracking, remarketing, and web analysis technologies.
Third Country Transfer:
Information on this can be found in the listings of the individual representation, tracking, remarketing, and web analysis providers.
Provision Mandatory or Necessary:
Of course, you can generally view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can disable the use of cookies at any time via the settings of your browser (see Revocation of Consent).
Please note that individual functions of our website may not work if you have disabled the use of cookies.
Revocation of Consent:
You can revoke your consent at any time via our cookie consent tool.
Profiling:
The extent to which we analyze the behavior of website visitors with pseudonymized user profiles can be found in the information provided below regarding the deployed representation, tracking, remarketing, and web analysis technologies.
Provision of Paid Services
Type and Purpose of Processing:
For the provision of paid services, we request additional data, such as payment information, to execute your order.
Legal Basis:
The processing of data that is required for the conclusion of the contract is based on Art. 6 (1) lit. b GDPR.
Recipients:
Recipients of the data may be processors.
Third Country Transfer:
The collected data may be transferred to the following third countries:
Your personal data will be transmitted to the respective organizers in the countries where the trip takes place for the booking of your trip.
The following data protection guarantees are in place:
Standard Contractual Clauses
Storage Duration:
We store this data in our systems until the legal retention periods have expired. These generally amount to 6 or 10 years for reasons of proper accounting and tax requirements.
Provision Mandatory or Necessary:
The provision of your personal data is voluntary. However, without providing your personal data, we cannot grant you access to our offered content and services.
Newsletter
Type and Purpose of Processing:
For the delivery of our newsletter, we collect personal data that is transmitted to us via an input mask.
For effective registration, we need a valid email address. To verify that a registration is actually made by the owner of an email address, we use the "Double Opt-in" procedure. To this end, we log the newsletter registration, the sending of a confirmation email, and the receipt of the requested response. No further data is collected.
Legal Basis:
Based on your explicitly granted consent (Art. 6 (1) lit. a GDPR), we regularly send you our newsletter or comparable information via email to your provided email address.
You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. Each newsletter contains a corresponding link for this purpose. Additionally, you can unsubscribe directly on this website at any time or inform us of your revocation via the contact option provided at the end of this privacy notice.
Recipients:
Recipients of the data may be processors.
Storage Duration:
Data will only be processed in this context as long as the corresponding consent is in place. After that, they will be deleted.
Provision Mandatory or Necessary:
The provision of your personal data is voluntary, solely based on your consent. Without existing consent, we unfortunately cannot send you our newsletter.
Revocation of Consent:
You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch at any time with effect for the future. Unsubscription can be requested via the link contained in every email or from the data protection officer mentioned below or the person responsible for data protection.
Contact Form
Type and Purpose of Processing:
The data you enter will be stored for the purpose of individual communication with you. For this, the provision of a valid email address and your name is required. This serves to assign the request and subsequently respond to it. The provision of further data is optional.
Legal Basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 (1) lit. f GDPR).
By providing the contact form, we aim to enable you to contact us easily. Your provided information will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the processing of the data entered in the contact form is carried out to perform pre-contractual measures (Art. 6 (1) lit. b GDPR).
Recipients:
Recipients of the data may be processors.
Storage Duration:
Data will be deleted no later than 6 months after processing the request.
If a contractual relationship is established, we are subject to the statutory retention periods under HGB and will delete your data after these periods have expired.
Provision Mandatory or Necessary:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for your request.
Use of Google Analytics
To the extent that you have given your consent, Google Analytics is used on this website, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter "Google"). Google Analytics uses so-called "cookies," i.e., text files that are stored on your computer and allow for analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a server of Google in the USA and stored there. Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.
Further information regarding terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services relating to website usage and internet usage to the website operator.
The data we send and link with cookies, user identifiers (e.g., user ID), or advertising IDs will be automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.
Revocation of Consent:
You can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This prevents the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
You can also prevent the storage of cookies by making the appropriate settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website fully.
Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link: Browser Add-On to Disable Google Analytics.
Use of Script Libraries (Google Webfonts)
In order to display our content correctly and visually appealing across browsers, we use "Google Web Fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") for displaying fonts on this website.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.
Use of Google Maps
We use the service of Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.
More information about data processing by Google can be found in Google's privacy notices: https://policies.google.com/privacy. There, you can also change your personal privacy settings in the privacy center.
Detailed instructions on managing your data in connection with Google products can be found here: https://www.dataliberation.org
By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.
If you do not wish for the data to be assigned to your profile at Google, you must log out from Google before activating the button. Google stores your data as usage profiles and uses them for advertising purposes, market research and/or the needs-based design of its websites. Such evaluation takes place especially (even for non-logged users) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object against the formation of these user profiles, whereby you must contact Google to exercise this right.
Revocation of Consent:
The provider currently does not offer an option for a simple opt-out or blocking the data transmission. If you wish to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it in a limited manner.
Embedded YouTube Videos
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page with the YouTube plugin, a connection to servers of YouTube is established. YouTube is informed about which pages you visit. If you are logged in to your YouTube account, YouTube can assign your browsing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's privacy policies, where you will also find more information about your rights and settings options to protect your privacy (https://policies.google.com/privacy).
Revocation of Consent:
The provider currently does not offer an option for a simple opt-out or blocking the data transmission. If you wish to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it in a limited manner.
Google AdWords
Our website uses Google conversion tracking. The operating company of the services of Google AdWords is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you arrived at our website via an ad placed by Google, a cookie will be set on your computer by Google Adwords. The conversion tracking cookie is set when a user clicks on an ad placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot thus be tracked across the websites of AdWords customers. The information collected with the help of the conversion cookie serves to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that can identify users personally.
Further information on data processing by Google can be found in Google's privacy notices: https://policies.google.com/privacy. You can also change your personal privacy settings in the privacy center.
Revocation of Consent:
The provider currently does not offer an option for a simple opt-out or blocking the data transmission. If you wish to prevent tracking of your activities on our website, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transmissions in the cookie consent tool. In this case, however, you may not be able to use our website or may only be able to use it in a limited manner.
SSL Encryption
To protect the security of your data during transmission, we use appropriate encryption methods (e.g., SSL) via HTTPS according to the current state of technology.
Information About Your Right to Object Under Art. 21 GDPR
Individual Case Related Right to Object
You have the right to object at any time to the processing of your personal data concerning you, which is based on Art. 6 (1) lit. f GDPR (data processing based on a balancing of interests), for reasons arising from your particular situation; this also applies to profiling based on this provision as per Art. 4 No. 4 GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an Objection
Georg Küster
Ammergasse 9-A
72070 Tübingen
Tel: 07071 - 77 00 60
Fax: 07071 - 76 04 36
E-Mail: mail[at]overcross.de
Changes to Our Privacy Policy
We reserve the right to adjust this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., with the introduction of new services. Your renewed visit will then be subject to the new privacy policy.
Questions to the Data Protection Officer
If you have any questions regarding data protection, please send us an email or contact the person responsible for data protection in our organization directly:
OVERCROSS
Georg Küster
Ammergasse 9-A
72070 Tübingen
Tel: 07071 - 77 00 60
Fax: 07071 - 76 04 36
E-Mail: contact[at]overcross.de
This privacy policy was created with the help of activeMind AG, experts for external data protection officers (Version #2020-09-30).
