Privacy Statement


Thank you for visiting our website and for your interest in our company, our products and our services. The protection of your privacy when using our website is of particular concern to us. Therefore, we would like to inform you below about how we collect anonymous and personal data.  


Responsible body and for questions and suggestions regarding data protection

The responsible body in terms of data protection law, particularly the General Data Protection Regulation (GDPR) is:  

ter Hürne GmbH & Co. KG  
Ramsdorfer Str. 5   
46354 Südlohn   
Germany  
Tel.: +49 28 62 / 7010   

If you have any questions or suggestions concerning data protection, please contact us by post at the above address with the addition of ‘c/o Data Protection Department’, or email us at: datenschutz@terhuerne.com.:
datenschutz@terhuerne.de



GENERAL INFORMATION ON DATA PROCESSING

In the context of processing on our behalf, the third-party providers creoline GmbH, 48341 Altenberge, and SHOPMACHER eCommerce GmbH & Co. KG, 48712 Gescher, provide hosting and website display services. This serves to protect our legitimate interests in the correct presentation of our offer, which outweigh our interests in the context of a balancing of interests, Section 6(1)(f) GPDR [General Data Protection Regulation]. All data collected in the course of using this website or in forms provided for this purpose, as described below, will be processed on creoline servers. Processing on other servers takes place only within the framework explained here.


Scope of the processing of personal data

In general, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our content and services. The collection and use of our users’ personal data regularly takes place only with the user’s consent. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.  


Legal basis for the processing of personal data 

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.  

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, art. 6(1)(b) GPDR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, art. 6(1) (c) GPDR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, art. 6(1)(d) GPDR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, art. 6(1)(f) GPDR serves as the legal basis for the processing.


Data deletion and storage period  

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator under Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.  


Purposes of data processing by the responsible body and third parties 

We process your personal data only for the purposes stated in this privacy statement. We do not transfer your personal data to third parties for purposes other than those stated. We will share your personal data with third parties only if:  

  1. you have given your express consent to this,  
  2. the processing is necessary for the performance of a contract with you,  
  3. the processing is necessary for compliance with a legal obligation,  
  4. the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not having your data disclosed. 


Cookies  

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). In the cookie settings of your web browser, you can see the corresponding storage period in the overview. You can set your browser in such a way that you are informed about the use of cookies and can decide individually whether to accept them or reject the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Apple Safari 

Brave

Google Chrome

Microsoft Edge

Mozilla Firefox

Opera

Of course, you can also view our website without cookies. Internet browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that some features of our website may not work if you have disabled the use of cookies.


Newsletter 

On the basis of your expressly granted consent, we will send you our newsletter or comparable information regularly by email to the email address you have provided.  

To receive the newsletter, it is sufficient to provide your email address. When subscribing to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by email of circumstances relevant to the service or registration (for example, changes to the newsletter service or technical circumstances).

For effective registration, we need a valid email address. To verify that a registration request has truly come from the owner of an email address, we use the double opt-in procedure. To do this, we log the newsletter request, despatch of a confirmatory email and receipt of the requested response. No further data will be collected. The data will be used only for sending the newsletter and will not be passed to third parties.

You may revoke your consent to the storage of your personal data and its use for the newsletter at any time. There is a link to this effect included in every newsletter. You may also unsubscribe at any time either directly via this website or by contacting us using the details provided at the beginning of this privacy statement.


Contact form 

If you contact us by email or contact form with questions of any kind, you give us your voluntary consent for the purpose of contacting you. It is necessary to provide a valid email address for this purpose. This is used to assign the request and the subsequent response to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. Personal data will be deleted after your enquiry has been dealt with.  


Room Studio – upload your own photos

If you use our ‘My room’ service in the room planner and upload your own pictures, please ensure that you use only pictures that do not contain any personal data (e.g. people in the room).  Please do not upload any pictures with people in them!

So that we can carry out the automated processing of your images and offer you our photo service, the images must be transferred to our server. In addition, this allows you to access the images at a later date. After a period of 30 days of non-use, the images are usually deleted. Furthermore, we may store individual images for a limited period of time to train and improve our recognition algorithm. If you do not agree with this, you must delete  the uploaded images in our application immediately after use.


Dealer search – use of Google Maps to provide a proximity search 

On our website, we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Maps is a web service for displaying interactive maps to present geographical information visually. 

Information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there when you access those sub-pages in which the Google Maps map is integrated. This is done regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates these. Collection, storage and analysis are carried out in accordance with art. 6(1)(f) GPDR on the basis of the legitimate interests of Google in the display of personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles; you must contact Google to exercise this right.
Google LLC, based in the USA, is certified for the US-European data protection agreement ‘Privacy Shield’, which ensures compliance with the level of data protection applicable in the EU.
If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
You can read Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html , the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html 
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (‘Google Privacy Policy’): 
https://www.google.de/intl/de/policies/privacy/


YouTube video plugins
If you have given us your consent in accordance with Section 6 (1) p. 1 lit. a GPDR, content from third party providers will be integrated on this website. This content is provided by Google (‘provider’). YouTube is a service provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
The extended data protection setting is activated for videos from YouTube that are embedded on our site. This means that no information from website visitors is collected and stored by YouTube unless they play the video.
The purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's privacy policy.


Facebook, Youtube, Instagram and Pinterest  
Our presence on social networks and platforms serves to improve and actively communicate with our customers and interested parties. We provide information there about our products, the company and ongoing special promotions.
When visiting our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally placed on your device for this purpose. These cookies store visitor behaviour and user interests. Pursuant to art. 6(1)(f) GPDR, this serves to protect our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which prevail in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent (agreement) to the processing of data, e.g. by means of a checkbox, the legal basis of the data processing is art. 6(1)(a) GPDR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here https://www.privacyshield.gov/list.
For detailed information on the processing and use of data by the providers on their sites, as well as a contact details and your rights and setting options in this regard in order to protect your privacy, in particular options to object (opt-out), please refer to the data protection notices of the providers linked below. 
Option to object (opt-out):


Google (Universal) Analytics for web analysis
For website analysis, this website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This serves to protect our legitimate interests in an optimised presentation of our offer, which outweigh our interests in the context of a balancing of interests, art. 6(1)(f) GPDR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: 
http://tools.google.com/dlpage/gaoptout?hl=de


----------------

Your data protection rights

You can exercise the following rights in accordance with Articles 12 to 23 of the GDPR at any time using the contact details provided by our data protection officer:  

  • Information about your data stored by us and how it is processed,
  • Correction of inaccurate personal data,
  • Deletion of your data stored with us,
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
  • The right to object to the processing of your data by us, and
  • Data portability, provided you have consented to the data processing or have entered into a contract with us.

If you have given us your consent, you may revoke this at any time with effect for the future.

You may lodge a complaint with your competent supervisory authority at any time. Your competent supervisory authority will depend on your place of residence, your work or the alleged violation. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html


Changes to our Privacy Statement  

We reserve the right to adapt this privacy statement so that it always complies with the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy statement will then apply to your next visit.  


(2020.40)