Privacy policy

1. data protection at a glance

General information

This privacy policy is intended to inform users of this website about the type, scope and purpose of the collection and use of personal data by the website operator [Karlsruher Bädergesellschaft mbH, Hermann-Veit-Str. 7, 76135 Karlsruhe] in accordance with the European General Data Protection Regulation (GDPR).
The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory provisions.
Please bear in mind that data transmission over the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties cannot be realised.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
We pass on your name and e-mail address to a content management system provider based in Europe. We have ensured the security of the transfer of your personal data by means of various legal instruments. We use a content management system to organise business processes.

Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time (Art. 15 GDPR). You also have the right to request the rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and tools from third-party providers

When you visit our website, your surfing behaviour may be statistically analysed. This is primarily done using cookies and so-called analysis programmes. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

Changes to our data protection provisions

We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In such cases, we will also adapt our data protection information accordingly. Please therefore refer to the latest version of our privacy policy.

2 General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The party responsible for data processing on this website is

Managing Director Oliver Sternagel

Karlsruher Bädergesellschaft mbH

Hermann-Veit-Str. 7 76135 Karlsruhe

Telephone: +49 721 133 5201 Fax: +49 721 133 5249

E-mail: info@ka-baeder.de

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal notification by e-mail, post or fax. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

Every data subject has the right to lodge a complaint with the supervisory authority (The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, phone: 0711/61 55 41 0, e-mail: poststelle@lfdi.bwl.de) if they believe that their personal data is being processed unlawfully.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Data security

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, disclosure, safeguarding of availability and separation of the data. Furthermore, we have established procedures that guarantee the exercise of data subject rights, the deletion of data and the response to data threats. Furthermore, we take the protection of personal data into account as early as the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR).

The security measures include, in particular, the encrypted transmission of data between your browser and our server.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

Objection to advertising emails

We hereby object to the use of contact data published within the scope of the legal notice obligation to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

3. data protection officer

Statutory data protection officer

EUWIS GmbH

Data Protection Team
Am Hagelsrech 14
66806 Ensdorf

Telephone: 06831 76 89 77 7
E-mail: info@team-datenschutz.de

4. data collection on our website

Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits processing to protect the legitimate interests of the website operator.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Group registration

If you send us enquiries via the group registration form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the group registration form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Children's birthday parties

If you send us enquiries via the children's birthday party registration form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the children's birthday party registration form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Webshop

If you send us enquiries via the webshop, your details from the order form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the order form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data entered by you in the order form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Competition

If you accept offers from us to take part in competitions, we may collect, store and process your name, address, email address and telephone number in order to organise the competition and communicate with you. We will delete the data immediately after the competition has ended.

Children and young people

Persons under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.

Cooperation with processors and third parties

If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

5. analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Browser plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website:

Deactivate Google Analytics

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

6 Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis.

We use Brevo, a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send our newsletter. If you register for our newsletter, the data you provide (in particular your email address) will be stored on Brevo's servers in the EU. This data is processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time by unsubscribing via the unsubscribe link in the newsletter or by contacting us directly. Further information on data processing by Brevo can be found in Brevo's privacy policy: www.brevo.com/de/legal/privacypolicy/.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses when registering for the BadePass) remain unaffected by this.

7 Plugins and tools

Our websites also contain third-party offers. If you click on such an offer, we transfer data to the respective provider to the extent necessary (e.g. the information that you have found this offer on our website and, if applicable, further information that you have already provided on our websites for this purpose).

If we use so-called "social plug-ins" of social networks such as Facebook and YouTube on our websites, we integrate them as follows:
When you visit our websites, the social plug-ins are deactivated, i.e. no data of any kind is transferred to the operators of these networks. If you wish to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network.
If you have a user account with the network and are logged in there when you activate the social plug-in, the network can assign your visit to our website to your user account. If you wish to avoid this, please log out of the network before activating the social plug-in.
If you activate a social plug-in, the network transmits the content it makes available directly to your browser, which integrates it into our websites. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system and your interactions on this platform are governed exclusively by the data protection provisions of the respective network.
The social plug-in remains active until you deactivate it or delete your cookies.

Use of the Facebook plugin

Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo on our site. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/

When you visit our website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

Further information on this can be found in Facebook's privacy policy at http://de-de.facebook.com/policy.php

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Re-targeting: Facebook Custom Audience from your website

Our website also uses so-called re-targeting technologies. We use these technologies to make our website more interesting for you. This technology makes it possible to target internet users who have already shown an interest in our website with adverts on the websites of our partners (e.g. Facebook). We are convinced that the display of personalised, interest-based advertising is generally more interesting for the Internet user than advertising that has no such personal reference. These advertisements are displayed on our partners' websites on the basis of cookie technology and an analysis of previous user behaviour. This form of advertising is completely pseudonymous. Naturally, no personal data is stored in the process. Retargeting technology is used in compliance with the applicable statutory data protection regulations.

Facebook users should note that Facebook's Website Custom Audiences communication tool is used on this website. For this purpose, so-called Facebook pixels are integrated on our websites, which mark you as a visitor to our website in anonymised form, i.e. without identifying you as a person. If you are later logged in to Facebook, a non-reversible and therefore non-personalised checksum (profile) from your usage data is transmitted to Facebook for analysis and marketing purposes. For more information about the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your setting options for protecting your privacy, please refer to Facebook's privacy policy, which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/privacy/explanation, among others.

If you wish to object to the use of Facebook Website Custom Audiences, you can do so at https://www.facebook.com/ads/website_custom_audiences/.

YouTube

Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

This website uses so-called web fonts provided by Google for the standardised display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Google Maps

This website uses the Google Maps map service via an API (application programming interface). The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Komoot

This website uses the Komoot map service via an API. The provider is Komoot GmbH. Friedrich-Wilhelm-Boelcke-Straße 2, 14473 Potsdam, Germany.

To use the functions of Komoot, it is necessary to save your IP address. This information is usually transferred to servers, some of which are located outside the European Economic Area, and stored there. The provider of this site has no influence on this data transfer.

Komoot is used in the interest of an attractive presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on the handling of user data in Komoot's privacy policy: https://www.komoot.de/privacy.

 

Karlsruhe, as of May 2023