We would like to inform you below about data protection on our website, as well as about the type, scope, and purpose of the personal data we collect, use, and process. Data protection is of great importance to us.
Personal data means any information that could personally identify you, such as name, IP address, telephone number, etc. This data is partly processed automatically when you visit the website (e.g., IP address, browser type, operating system), or when you give us your consent to process it, or when you voluntarily provide us with your data (e.g., by filling out a form on our website).
We would also like to inform you about your rights under the GDPR. You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data, as well as the right to correction or deletion of this data.
Furthermore, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. If you have given us consent to process your data, you may withdraw this consent at any time with effect for the future. You also have the right to lodge a complaint with the competent supervisory data protection authority.
Controller responsible for data protection / processing entity:
Claudia Neeser
Schillerstraße 40c
80336 Munich
Telephone: +49 (0)89 890 599 426
E-mail: info@ga-munich.com
Processing of Your Data in the Context of Our Services
For our customers or business partners, or in the event that you are interested in our services, the type, scope, and purpose of the processing of your personal data depend on the contractual or pre-contractual relationship between us. We process personal data that we request from you or that you provide to us in order to answer your inquiries, prepare an offer for you, or process your order.Data subjects include prospective clients, business partners, and contractual partners. The purpose of processing is the performance of contractual services, communication, responding to contact inquiries, as well as office and organizational procedures.
Unless otherwise stated in this privacy policy, the processing of your data and its transfer to third parties is limited to the data necessary and appropriate to answer your inquiries and/or fulfill the contract, to protect our rights, and to comply with legal obligations.
Data concerned includes:
Inventory data (e.g., names, addresses)
Payment data (e.g., bank details, invoices)
Contact data (e.g., e-mail address, telephone number, postal address)
Contract data (e.g., subject matter of the contract, contract duration)
The legal basis for data processing is Art. 6 (1) sentence 1 lit. b GDPR, namely the fulfillment of the contract or the execution of pre-contractual measures.
Unless a specific storage period is stated in this privacy policy, we store your personal data until the purpose for data processing ceases to apply. We delete your personal data when it is no longer required, i.e., after the termination of our contractual relationship, when our legitimate interest in further processing ceases, or if you request deletion.
Mandatory statutory provisions – in particular statutory retention obligations – remain unaffected. It may also be necessary, in order to assert, exercise, or defend legal claims arising from contractual relationships, or to protect the rights of another natural or legal person, to process your personal data until the expiry of the relevant statutory periods. In such cases, we restrict the processing of the data to these purposes until the expiry of the retention periods, after which the data will be deleted.
Accessing the Website – Processing of Personal Data and Purpose of Use
When you access our website, your internet browser automatically transmits data to our web server (for technical reasons). The following data is processed in the server log files during an active connection between your internet browser and our web server:
For technical reasons (website access), this data is stored temporarily. It is not possible for us to draw conclusions about individual persons from this data. After a maximum of 7 days, IP addresses are deleted or anonymized.
The data is evaluated exclusively for internal purposes and does not allow us to identify you personally. No comparison with other data sources takes place.
The data mentioned is processed for the following purposes:
The legal basis for data processing is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the collected data to draw conclusions about your person. You may visit the website without providing any personal information.
Google Maps
With your consent (Art. 6 (1) sentence 1 lit. a GDPR), this website integrates Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), in order to display an interactive map and generate directions. The legal basis for processing also arises from Art. 6 (1) lit. f GDPR, based on our legitimate interest in presenting our location.
By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored on a Google server. Google may transfer information obtained through Maps to third parties if required by law or if third parties process this data on behalf of Google.
When accessing Google Maps, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.
You have the option to disable the Google Maps service and thereby prevent data transfer to Google by deactivating JavaScript in your browser settings. Please note, however, that in this case the map display on our pages will not be usable.
Data transfers to the USA are based on your consent. In addition, we rely on the EU Commission’s Standard Contractual Clauses.
Further information can be found at:
The Google Privacy Policy and additional terms of use for Google Maps are available at:
https://policies.google.com/privacy?hl=en
Inquiries by E-Mail or Telephone
If you contact us by e-mail or telephone, your inquiry, including all personal data resulting from it (e.g., name, inquiry), will be stored and processed by us for the purpose of handling your request. This data will not be passed on without your consent. There is no legal or contractual obligation to provide your data; however, without providing your data, we cannot process your request.
The processing of this data takes place on the basis of Art. 6 (1) lit. b GDPR, insofar as your inquiry is related to the performance of a contract or necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1) lit. a GDPR) and/or on our legitimate interests (Art. 6 (1) lit. f GDPR), since we have a legitimate interest in the effective processing of inquiries addressed to us.
The data sent to us via contact requests (e-mail) will be stored until you request deletion, revoke your consent to storage, or the purpose of the data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Data When Using Our Contact Form
If you send us a message via our contact form, you may use a pseudonym instead of your real name. Entering an e-mail address is necessary to enable us to contact you by e-mail. There is no legal or contractual obligation to provide your data; however, we cannot process your request without it.
The data you enter in the contact form will be used by us exclusively for responding to your inquiry. We do not pass on the data you provide in the contact form to third parties, nor do we use it for any purposes other than responding to your request. Data processing takes place either for the purpose of fulfilling a contract to which the data subject is a party or for carrying out pre-contractual measures (Art. 6 (1) lit. b GDPR), or on the basis of your voluntary consent (Art. 6 (1) lit. a GDPR) and/or our legitimate interests (Art. 6 (1) lit. f GDPR), since we have a legitimate interest in the effective processing of inquiries.
Your data will be deleted once your inquiry has been fully processed, provided that no statutory retention obligations prevent deletion.
Newsletter
We send our newsletter containing promotional information (hereinafter “newsletter”) only with the express consent of the recipients in accordance with Art. 6 (1) lit. a GDPR. Subscription to our newsletter takes place in a so-called double opt-in procedure. After registering for the newsletter, you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary to prevent third parties from registering with your e-mail address. There is no legal or contractual obligation to provide your data; however, we cannot send you a newsletter without it.
Newsletter subscriptions are logged in order to be able to verify the registration process in compliance with legal requirements. This includes the storage of the time of registration and confirmation as well as the IP address. To subscribe to our newsletter, it is sufficient to provide your e-mail address. Optionally, we may ask you to provide your first and last name as well as your address. This information is voluntary and serves only to personalize the newsletter. You may also use a pseudonym.
Your e-mail address will remain stored with us until you unsubscribe from the newsletter. You can unsubscribe at any time with effect for the future, either by clicking the link at the end of each newsletter or via the “unsubscribe” link on our website and following the described steps.
The processing of e-mail addresses for the newsletter is carried out on the basis of Art. 6 (1) lit. a GDPR. Our interest lies in the use of a user-friendly and secure newsletter system that serves both our business interests and meets users’ expectations for information about our products. Please note that you may revoke your consent to the future processing of your personal data at any time. Further information on your right of withdrawal can be found under the section “Rights of Data Subjects.”
Use of Data for Tour Bookings – bookingkit
We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g., via contact form or e-mail), or when booking a tour. For online tour bookings, we use the booking system of bookingkit (https://bookingkit.com – bookingkit GmbH, Sonnenallee 223, D-12059 Berlin, mail@bookingkit.de). The privacy policy of bookingkit can be found at: https://bookingkit.com/de/datenschutzerklaerung/.
Which data is collected can be seen from the respective input forms. We use the data you provide solely for contract processing and handling your inquiries. Once your request has been fully answered or the contract has been fully executed, your data will be blocked for further use and deleted after the expiry of tax and commercial retention periods.
The legal basis for data processing is Art. 6 (1) sentence 1 lit. a, b GDPR.
Transfer of Data to Payment Service Providers
For the purpose of fulfilling contracts, we pass on your data to the company entrusted with payment processing, insofar as this is necessary to pay for the services ordered. Depending on which payment service provider you choose during the order process, we forward the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers we have engaged, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, provided you create an account with them. In this case, you must log in with your access data during the ordering process. The respective payment service provider’s privacy policy applies.
The legal basis for data processing is Art. 6 (1) sentence 1 lit. a, b GDPR.
Online Presence in Social Networks
We maintain online presences on social networks for advertising purposes.
Please note that you use social services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g., sharing, rating).
When you visit our online presences in social media, the respective provider collects and processes personal data for advertising and market research purposes. Usage profiles are usually created in this context, especially if you are a member of the respective platform and logged in there. These usage profiles may be used by the providers to display interest-based advertising to you.
To prevent operators of social networks from collecting information about you during your visit to our website, you should log out of the respective social network before visiting our website and delete any cookies of the social networks from your browser.
Social Network Links
Our website does not include social plugins from Facebook or other social networks. Therefore, no program code from a social network is active on our pages. The icons for Facebook, etc. on our website are merely linked images.
Privacy Notice – Online Presence on Facebook/Instagram (META)
Facebook Ireland (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland – hereinafter referred to as “Facebook”) and the page administrator (us) are jointly responsible for the processing of personal data for the “Covered Products” defined in the Terms of Use on the page administrator’s Facebook account, which are collected in connection with a visit to or interaction with a page (including its content).
Covered Products include all Facebook products, Facebook Pages, and Page Insights. Facebook products include Facebook itself (including the mobile Facebook app and the in-app browser), Messenger, Instagram (including apps such as Direct and Boomerang), Portal devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team apps, and all other features, apps, technologies, software products, products, or services offered by Facebook, Inc. or Facebook Ireland Limited. In addition, Facebook Business Tools are also part of the Facebook products.
The scope of joint processing and the Controller Addendum covers the collection of personal data defined in the Terms of Use for Covered Products and their transmission to Facebook. The subsequent processing of data by Facebook is not part of the joint processing. Likewise, joint processing does not apply if personal data is processed exclusively by us – in this case, we are the sole controller of the data processing.
The information required under Article 13 (1) lit. a and b GDPR can be found in Facebook’s Data Policy at https://www.facebook.com/about/privacy. Further information on joint processing is available in the respective Terms of Use of the products.
For the use of certain Facebook products (so-called “Facebook Business Tools”) and the related data processing, the Controller Addendum between us and Facebook applies as joint controllers in accordance with Art. 26 GDPR, which you can view at https://www.facebook.com/legal/controller_addendum.
The page administrator and Facebook have entered into this Controller Addendum to determine the respective responsibilities for fulfilling the obligations under GDPR with respect to joint processing (as set out in the Terms of Use for Covered Products).
It has also been agreed that, between the parties, Facebook is responsible for enabling data subjects’ rights under Articles 15–20 GDPR with regard to the personal data stored by Facebook after joint processing.
Data transfers are based on the EU Commission’s Standard Contractual Clauses.
Further information can be found at:
https://de-de.facebook.com/help/566994660333381/?helpref=uf_share
https://www.facebook.com/legal/EU_data_transfer_addendum
https://help.instagram.com/519522125107875/?maybe_redirect_pol=0
Data Processing Terms on Facebook
Please note that the use of certain Facebook products may involve the transfer of personal information to Facebook. Depending on the circumstances, Facebook Ireland Limited may also transfer EU data to Facebook Inc. in the USA for storage and further processing. By using Facebook products, users agree to Facebook’s Data Processing Terms. These can be found at https://www.facebook.com/legal/terms/dataprocessing/update.
The Facebook EU Data Transfer Addendum is available at https://www.facebook.com/legal/EU_data_transfer_addendum.
Facebook’s Data Policy is available at https://www.facebook.com/about/privacy/ – Instagram’s Data Policy is available at https://help.instagram.com/519522125107875.
Information about cookies and other storage technologies on Facebook can be found at https://www.facebook.com/policies/cookies/.
Facebook’s Data Security Terms can be found at https://www.facebook.com/legal/terms/data_security_terms.
Facebook’s Commercial Terms of Service are available at https://www.facebook.com/legal/commercial_terms/update.
You can contact Facebook’s Data Protection Officer at https://www.facebook.com/help/contact/540977946302970.
Additional Information on Page Insights Data
Facebook provides us with so-called Page Insights for the Facebook page. Insights data are aggregated data through which we gain information on how users interact with the Facebook page. The legal basis for data processing is Art. 6 (1) sentence 1 lit. f GDPR, safeguarding our legitimate interests in an optimized presentation of our online offering and effective communication with users.
Data processing is carried out on the basis of an agreement between the joint controllers in accordance with Art. 26 GDPR, which you can view at https://www.facebook.com/legal/terms/page_controller_addendum.
Further information on Page Insights data on Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data as well as at https://de-de.facebook.com/help/instagram/155833707900388.
Data Processing When Contacting Us via Facebook Products
We collect personal data when you contact us, e.g., via the contact form or Messenger. This data is stored and used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Your data will be deleted after your inquiry has been completed, provided there are no statutory retention obligations.
Your Rights
Facebook and we have agreed that Facebook is primarily responsible for providing you with information about joint processing and for enabling you to exercise your rights under GDPR. According to GDPR, you have the right to access, rectification, portability, and erasure of your data, as well as the right to object to processing and to restrict processing. You can learn more about these rights in your Facebook settings. For more information on your rights, see also the section “Rights of Data Subjects” in this Privacy Policy.
Facebook and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing under joint responsibility. You have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with your local supervisory authority.
Right to Object to Advertising
You may object to the processing of your data for advertising purposes on Facebook at any time by adjusting your ad settings in your Facebook user account at https://www.facebook.com/settings?tab=ads.
Legal Basis for Operating the Facebook/Instagram Page and Processing of Personal Data When Accessed
We operate the Facebook/Instagram page for advertising purposes for our goods and services. The processing of personal data is based on Art. 6 (1) sentence 1 lit. f GDPR.
Data Security – SSL Encryption
We use SSL (Secure Socket Layer) encryption on our website to protect the transmission of confidential content. When SSL encryption is activated, the data you transmit to us cannot be read by third parties. You can recognize an encrypted connection by the closed padlock or key symbol in your browser’s status bar and the “https://” in your browser’s address line.
Processing/Disclosure of Data
Your personal data will not be transmitted to third parties for purposes other than those listed above or below.
We only pass on your personal data to third parties if:
you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
it is legally permissible and required for the performance of a contract or pre-contractual measures with you pursuant to Art. 6 (1) sentence 1 lit. b GDPR,
there is a legal obligation to do so pursuant to Art. 6 (1) sentence 1 lit. c GDPR, or
disclosure pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail, in particular if the data subject is a child.
Rights of Data Subjects
You have the right:
pursuant to Art. 15 GDPR, to request information about your personal data processed by us,
pursuant to Art. 16 GDPR, to request without delay the rectification of inaccurate or completion of your personal data stored by us,
pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims,
pursuant to Art. 18 GDPR, to request the restriction of processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure, we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR,
pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller,
pursuant to Art. 7 (3) GDPR, to withdraw your consent once given to us at any time. This means that we may no longer continue the data processing based on this consent in the future,
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates GDPR. You can usually contact the supervisory authority of your habitual residence or workplace, or our place of business. A list of data protection officers in Germany and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to Object to Data Processing in Specific Cases and to Direct Marketing (Art. 21 GDPR)
If we process your personal data based on our overriding legitimate interests within the framework of a balancing of interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to such processing with future effect.
If the processing is carried out for direct marketing purposes, you may exercise this right at any time. This also applies to profiling, insofar as it is connected with such direct marketing. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
To exercise your right to object, an e-mail to us is sufficient.
After you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes.
Changes to this Privacy Policy
Due to the further development of our website and offers, or due to changed legal or official requirements, it may become necessary to amend this privacy policy in compliance with the applicable data protection regulations. The current privacy policy can be accessed and printed out at any time on our website under “Privacy Policy.”
Status: July 2022
