Privacy Policy

Controller

The controller responsible for processing personal data in connection with this blog is:

Schloss Elmau GmbH & Co. KG
In Elmau 28
82493 Krün

Phone: +49 (0)8823 18-0
Email: info@schloss-elmau.de

Data Protection Officer
You can contact our Data Protection Officer at:

Dr. Anke Thiedemann c/o RWT Anwaltskanzlei GmbH
Charlottenstraße 49
72764 Reutlingen

Email: anke.thiedemann@rwt-gruppe.de

Hosting

This website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster.

For the purpose of providing and securely operating the website, our hosting service provider processes the following data in what are known as server log files:

IP address of the accessing terminal device
Date and time of access
Pages and files accessed
Browser type and browser version
Operating system used
Referrer URL
Access Status

Data processing is carried out to ensure the secure and trouble-free operation of the website. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure provision and operation of our online services.

A data processing agreement pursuant to Article 28 of the GDPR has been entered into with our hosting service provider.

Cookies and Consent Management

We use the consent management tool Borlabs Cookie to obtain and document consent for the use of cookies and similar technologies. Specifically, the following information is stored:

Your decision regarding consent or the revocation of consent
Time of the decision
Information about your device and your browser
A Consent ID

The processing is carried out to meet the legal requirements for providing proof of consent granted. The legal basis is Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR, as well as Section 25(2)(2) of the TDDDG.

Google Analytics

Provided you give your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze the use of our website. This allows the following information, in particular, to be processed:

Pages Visited
Click behavior
Length of visit
Visitor Origin
Technical information regarding the browser, operating system, and device
Shortened IP address

IP anonymization is enabled. According to Google, the IP address is truncated within the European Union or the European Economic Area before it is processed further. Google Signals is not used.

Data processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect via the cookie settings.

The data may be transmitted to servers operated by Google LLC in the United States. Google is certified under the EU-U.S. Data Privacy Framework. For more information, visit: https://policies.google.com/privacy

Contacting Us via Email

If you contact us by email, we process the data you provide in order to handle your inquiry. This includes, in particular:

Name
Email address
Content of your message
Other information you voluntarily provide

Data is processed to handle your inquiry and communicate with you. The legal basis is Article 6(1)(f) of the GDPR or Article 6(1)(b) of the GDPR, provided that your inquiry is related to the conclusion or performance of a contract.

The data will be deleted as soon as it is no longer needed to process your inquiry and there are no statutory retention requirements that prevent this.

User Account and Favorites Feature

To use certain features of our blog, particularly the "Favorites" feature, you must create a user account. As part of the registration process, we process the following data in particular:

Username
Email address
Password (stored in encrypted form)

Registration is done through a double opt-in process. After registering, you will receive an email in which you must confirm your registration.

Within your user account, you can save posts and content as favorites. The saved favorites are associated with your user account.

Data is processed to provide and manage the user account as well as the favorites feature. The legal basis is Article 6(1)(b) of the GDPR.

The data will be stored for as long as your user account remains active. You may request that your user account be deleted at any time.

Spotify Podcasts

On individual pages of our blog, we embed content from the streaming service Spotify. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.

When you visit a page with embedded Spotify content, personal data—specifically your IP address and technical information about your device—may be transmitted to Spotify.

To the extent that Spotify uses cookies or similar technologies, their use is based solely on your consent pursuant to Article 6(1)(a) of the GDPR and § 25(1) of the TDDDG.

For more information: https://www.spotify.com/de/legal/privacy-policy/

Social Media Links

On our website, you'll find links to our social media profiles, specifically:

Facebook
Instagram
YouTube

These are simply links. As a general rule, personal data is only transmitted to the respective providers when you click on the respective link.

There is no separate newsletter registration form on this blog. If you would like to subscribe to our newsletter, you will be redirected via a link to the corresponding page on the main Schloss Elmau website. The privacy policy of that website applies to the processing of personal data that takes place there.

Data Transfers to Third Countries

To the extent that services provided by companies based outside the European Union or the European Economic Area are used, or data is transferred to such countries, a lower level of data protection may exist.

When using Google Analytics, personal data may be transferred to the United States. The transfer is based on the EU-U.S. Data Privacy Framework or appropriate safeguards pursuant to Art. 44 et seq. of the GDPR.

Storage Period

We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention requirements apply.

Your Rights

Subject to the legal requirements, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 of the GDPR)
Right to erasure / “right to be forgotten” (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to Data Portability (Art. 20 GDPR)
Right to Object (Art. 21 GDPR)
The right to withdraw consent at any time, effective for the future

Withdrawal of Consent

If the processing of personal data is based on your consent, you may withdraw that consent at any time, effective for the future. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected. You may withdraw your consent, in particular, through the cookie settings on our website or by contacting us using the contact information provided above.

Right to Object

To the extent that we process personal data pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data at any time for reasons related to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Right to File a Complaint

You also have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Schloss Elmau is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
www.lda.bayern.de

Changes to this Privacy Policy
We reserve the right to amend this privacy policy if necessary due to technical, legal, or organizational changes.