Privacy Policy

Privacy statement according to the DSGVO

Data protection is an important concern for the Murnau market. We therefore attach great importance to data-saving and citizen-friendly data processing when processing personal data in connection with the performance of our duties.

This privacy policy also refers to the processing of personal data and information within the meaning of Section 25 TDDDG within the scope of this website, including the services offered there.

1 Name and address of the person responsible

The person responsible within the meaning of the basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations is the:

Market Murnau a. Staffelsee

Untermarkt 13
82418 Murnau a. Staffelsee
Phone: +49 (0)8841 476-0
Email: info@murnau.de

2 Name and address of the data protection officer

If you have any questions about data protection and data security, please contact our data protection officer directly:

actago GmbH
Weidenstrasse 66
94405 Landau an der Isar
Phone: +49 (0)9951 99990-20
Email: datenschutz@actago.de
Website: www.actago.de

3 General Information

3.1 Purposes and legal bases for the processing of personal data

The purpose of the processing is to fulfil the public tasks assigned to us by the legislator.

The legal basis for the processing of your data arises, unless otherwise stated, from Art. 4 Para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with
Art. 6 Paragraph 1 Subparagraph 1 Letter e of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data required to fulfil a task incumbent upon us. If you have consented to processing, the data processing is based on Art. 6 Paragraph 1 Subparagraph 1 Letter a of the GDPR.

3.2 Recipients of personal data

The technical operation of our data processing systems is carried out by neusta destination solutions GmbH

If necessary, your data will be transmitted to the responsible supervisory and auditing authorities to exercise the respective control rights.

In order to avert threats to information technology security, log data can be forwarded to the State Office for Information Technology Security on the basis of Art. 44 BayDiG-E (for more information, see “Logging”).

3.3 Duration of storage of personal data

Your data will only be stored for as long as is necessary to fulfil the task, taking into account statutory retention periods.

3.4 your rights

If we process your personal data, you as the data subject have the following rights:

You can request information about whether we process your personal data. If this is the case, you have the right to information about this data and other information related to the processing (Art. 15 GDPR). Please note that this right to information may be restricted or excluded in certain cases.
(see in particular Art. 10 of the Bavarian Data Protection Act - BayDSG).
If incorrect personal data is processed, you have the right to rectification (Article 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing (Articles 17 and 18 GDPR).
However, the right to erasure under Art. 17 Para. 1 and 2 GDPR does not apply if the processing of personal data is necessary to perform a task in the public interest or in the exercise of official authority (Art. 17 Para. 3 lit. b GDPR)
If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future.
The legality of the data processing carried out on the basis of the consent until the revocation is not affected by this.
You have the right to object to the processing of your data at any time for reasons arising from your particular situation (Article 21 GDPR). If the legal requirements are met, we will subsequently no longer process your personal data.

Further restrictions, modifications and, where applicable, exclusions of the aforementioned rights may arise from the General Data Protection Regulation or national legislation. You can also obtain more detailed information about these rights from our data protection officer.

3.5 Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection. You can reach them using the following contact details:

Postal address: PO Box 22 12 19, 80502 Munich

Address: Wagmüllerstraße 18, 80538 Munich

Phone: 089 212672-0

Fax: 089 212672-50

Online notification: https://www.datenschutz-bayern.de/service/complaint.html

4 Information about the website

4.1 Technical implementation

Our web server is operated by neusta destination solutions GmbH. The personal data you transmit when visiting our website is therefore processed on our behalf by the following service provider:

neusta destination solutions GmbH

Munich Street 1, D-86899 Landsberg am Lech

info@destination.one

4.2 Logging

When you access this or other websites, you transmit data to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
web browser and operating system used
Complete IP address of the requesting computer
amount of data transferred.

We store this data for reasons of technical security, in particular to prevent attempts to attack our web server. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to individual users.

In order to avert threats to information technology security, these data will be forwarded to the State Office for Information Technology Security on the basis of Art. 44 BayDiG-E.

4.3 Secure data transfer

When you access this information service, we offer a connection encrypted with HTTPS and Perfect Forward Secrecy, which is secured with at least the TLS 1.2 encryption protocol, so that your data is protected from third parties' access during data transmission. We recommend that you keep your Internet browser up to date in order to use this option.

5 Cookies

We use cookies to ensure the correct technical and functional provision of this information. Cookies are small text files that are stored on the device you use.

The legal basis for the storage of information and the processing of personal data using cookies is Section 25 TDDDG. The use of functional cookies is voluntary. If these cookies are blocked, the provision of certain functions may not be fully possible.

Technically necessary cookies are only valid for the current session and are automatically deleted as soon as you close your browser. When you access this website, we store cookies (small files) on your device. These are valid for:

Name: Storage period:

CookieConsent 3 months
deskline/web/#_data Persistent
deskline/web/#_expiry Persistent
deskline/web/#_sync_data$ Persistent
deskline/web/#_sync_expiry$ Persistent
TiPMix [x2] 1 day
x-ms-routing-name [x2] 1 day
__cf_bm 1 day
uc_settings Persistent
uc_ui_version Persistent
uc_user_country End of session
frontend_b590fe4cdc6b3f0b9d7de4a933666783 1 Tag
rgtr_val 29 days
uc_regiondo End of session
_ga 399 days
_ga_# 399 days
vuid 399 days
ub-emb-id Persistent
uc_user_interaction Persistent
1P_JAR 1 month
NID 6 months
AEC 2 months
CONSENT 15 years
googtrans end of session

6 Contact form and contact by email

6.1 Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask will be sent to us and stored. This data is:

First Name*
Surname*
Street, house number
ZIP / City
E-Mail *
Phone
Your message*

* Required field

Your consent will be obtained for the processing of the data during the sending process and reference will be made to this privacy policy. Alternatively, you can contact us using the email address provided. In this case, your personal data sent with the email will be stored. The data will not be passed on to third parties in this context.

The data will only be used to process the conversation.

6.2 Legal basis for data processing

The legal basis for the processing of your personal data, if the user has given his consent, is Art. 6 (1) (a) GDPR.

The legal basis for the processing of your personal data transmitted when sending an email is Art. 6 (1) (e) GDPR in conjunction with Art. 4 BayDSG. If the contact by email is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

6.3 Purpose of data processing

The processing of your personal data from the input mask serves us solely to process the contact.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

6.4 Duration of storage

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

6.5 Possibility of objection and removal

You have the option at any time to object to the processing of your personal data when contacting us via the contact form or by email for the future. In such a case, the conversation between you and us cannot be continued. In this case, all personal data that was stored during the contact process will be deleted.

7 Electronic mail (e-mail)

Information that you send to us unencrypted via electronic mail (e-mail) may be read by third parties during transmission. We are generally unable to verify your identity and do not know who is behind an e-mail address. Legally secure communication via simple e-mail is therefore not guaranteed. Like many e-mail providers, we use filters against unwanted advertising ("SPAM filters"), which in rare cases also automatically classify normal e-mails as unwanted advertising and delete them. E-mails that contain harmful programs ("viruses") are always automatically deleted by us.

If you have concerns about transmitting personal data or other sensitive data, please agree on suitable encryption with the recipient (our employees) before transmission, or use postal mail.

8 Active components

The information provided uses active components such as JavaScript, Java applets or Active-X controls. You can deactivate this function by adjusting the settings in your Internet browser.

9 Booking request for accommodation search

9.1 Description and scope of data processing

On our website we offer visitors the opportunity to make booking requests for accommodation in Murnau. To do so, the following data must be provided:

Salutation *
First Name
Surname*
Street, house number*
Postcode*
Place/City*
Country *
E-Mail *
Confirm email address*
Phone
Your message

* Required field

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.

9.2 Legal basis for data processing

The legal basis for the processing of your personal data, if the user has given his consent, is Art. 6 (1) (a) EU GDPR.

9.3 Purpose of data processing

When making a booking, the data you provide will also be used to process the booking. For this purpose, your data will be passed on to other companies, if necessary, e.g. to the accommodation you have booked. These companies may use your data to process the order.

9.4 Duration of storage

We will delete your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

9.5 Objection and removal options

You have the right to have your personal data deleted at any time. We undertake to remove all your personal information from the database with immediate effect as soon as you request this by telephone, fax, letter or email.

9.6 Processing of the booking system

Our bookings or orders are processed using software from feratel media technologies AG (headquarters: Maria-Theresien-Straße 8, A-6020 Innsbruck, A). This service provider is used on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. e GDPR and a contract for data processing in accordance with Art. 28 Para. 3, Sentence 1 GDPR and does not use the personal data generated in the process itself or pass it on to third parties.

10 brochure orders

10.1 Description and scope of data processing

On our website we offer visitors the opportunity to order local brochures. To do so, the following information must be provided:

Salutation *
First Name
Surname*
Street, house number*
Postcode*
Place/City*
Country *
E-Mail *
Confirm email address*
Phone
Your message

* Required field

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.

10.2 Legal basis for data processing

The legal basis for the processing of your personal data, if the user has given his consent, is Art. 6 (1) (a) EU GDPR.

10.3 Purpose of data processing

When placing an order, the data you provide will be used to process the order.

10.4 Duration of storage

10.5 Objection and removal options

10.6 Processing of the booking system

11 Newsletter

11.1 Description and scope of data processing

Our website offers you a newsletter in which we inform you about current events and offers. If you would like to subscribe to the newsletter, you must provide the following data:

Gender
First Name
Last Name
E-mail

If you subscribe to the newsletter, you agree to receive the newsletter and the procedures explained.

The newsletter is sent via Newsletter2Go, a shipping platform of Sendinblue GmbH, based at Köpenicker Straße 126, 10179 Berlin. Information about the data protection regulations of the shipping service provider can be found at: https://de.sendinblue.com/datenschutz-uebersicht/

11.2 Legal basis for data processing

The legal basis for the processing of your personal data in the context of sending the newsletter is the existence of your consent in accordance with Art. 6 (1) (a) GDPR.

11.3 Purpose of data processing

The purpose of collecting your personal data is to send you the newsletter. The purpose of processing your personal data when sending the newsletter is to inform you about current events and offers.

11.4 Duration of storage

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your personal data will therefore be stored as long as your newsletter subscription is active.

11.5 Possibility of objection and removal

You can cancel your newsletter subscription at any time. There is a link for this purpose in every newsletter. After you cancel your subscription, your personal data will be deleted. Canceling your subscription also allows you to revoke your consent.

12 Web analysis through Google Analytics, Google AdWords

12.1 Scope of processing of personal data

This website uses Google Analytics, the web analysis service of Google Inc. (hereinafter “Google”), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

We use Google Analytics to analyse the surfing behaviour of our users. Google Analytics uses so-called "cookies", text suggestion files that are stored on your computer and that enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and saved there. Since we have activated IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. By using the code "anonymizeIp" we enable the anonymous recording of IP addresses (so-called IP masking). The software runs exclusively on the servers of our website. The personal data of users is only saved there. The data is not passed on to third parties.

The software is set up so that the IP addresses are not stored in full, but two bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

On behalf of the operator of this website, Google Analytics will use the information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. We would like to learn from these statistics how we can offer you an even better user experience, but we will not identify you ourselves.

The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the available browser plug-in.

For more information, see Google Terms of Service and Google Privacy Policy.

12.2 Legal basis for the processing of personal data

The legal basis for the processing of your personal data is Art. 6 (1) (a) GDPR.

12.3 Purpose of data processing

The processing of your personal data enables us to analyse your surfing behaviour. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymising the IP address, your interest in the protection of personal data is sufficiently taken into account.

12.4 Duration of storage

Your personal data will be deleted as soon as it is no longer required for our record-keeping purposes.

12.5 Objection and removal options

Cookies are stored on your computer and transmitted from there to our website. Therefore, as a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions.

Users of this website who do not want their data to be tracked by Google Analytics can install the Google Analytics Opt-out Browser Add-on. This add-on instructs the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) running on websites to not allow information to be sent to Google Analytics.

If you wish to disable Google Analytics, please visit this page and install the Google Analytics opt-out add-on for your browser. For detailed information on installing and uninstalling the add-on, please refer to the relevant help resources for your browser.
Browser and operating system updates may cause the opt-out add-on to no longer work as intended. For more information on managing Chrome add-ons, see: https://support.google.com/chrome_webstore/answer/2664769?hl=deIf you are not using Chrome, please contact your browser manufacturer directly to find out if add-ons work properly in the browser version you are using.
The latest versions of Internet Explorer occasionally load the Google Analytics Opt-out Add-on after data has been sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, the add-on will reset these cookies within a short period of time to ensure that your Google Analytics browser add-on continues to work without restrictions.
The Google Analytics opt-out browser add-on does not prevent data from being sent to the website or to other web analytics services.
For more information about Terms of Use and Privacy, please see
https://marketingplatform.google.com/about/analytics/terms/de/ or by
https://policies.google.com/?hl=de.
IP anonymization is activated on this website.

13 Using Google Translate

This site uses the translation service Google Translate via an API. Provider is the Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Translate, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

We use Google Translate to ensure that our online offerings are easily accessible and barrier-free for international visitors.

Google Translate will only be used after the user has given their consent in accordance with Art. 6 (1) (a) GDPR.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://www.google.de/intl/de/policies/privacy/

14 VR Easy

We use VR-Easy on our website to give you an impression of different destinations. VR-Easy is a service provided by VR-EASY GmbH, based at Eisenbahnstraße 92/93, 16225 Eberswalde.

VR-Easy enables us to integrate images, videos, panoramic or 360-degree images into our website. The VR-Easy service is provided on Deutsche Telekom servers in Germany. If you visit our website, it cannot be ruled out that a connection will be established between your system and the VR-Easy server and that information such as your IP address will be transmitted via this.

We have concluded a data processing contract with VR-EASY GmbH, which stipulates that VR-Easy only uses your data to provide the service.

The legal basis for the processing is consent in accordance with Art. 6 (1) (a) GDPR.

For further information on how VR-Easy handles personal data, please see VR-Easy’s privacy policy

15 Regiondo

On our website we offer the possibility to search for and book experiences and activities. These are elements that are embedded in our site via so-called iFrames; they are content from a third-party provider. In this case, the third-party provider I use is Regiondo GmbH.

Please note: As soon as you fill out the form with your personal data and submit it, this data is automatically saved by the third-party provider Regiondo GmbH and made available to me on an intranet for further processing. You thereby agree to the storage and processing of your personal data. If the booking is made, the data will remain stored for the purposes of invoicing and documentation (accounting). If the booking is not made, the data will be deleted.

The data will not be passed on to third parties for advertising purposes. The data will only be passed on to third parties if you make an online payment as part of the booking (see the following section). The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR if the user has given their consent.
For further information, please see regiondo’s privacy policy:
https://pro.regiondo.com/de/datenschutz/

16 Deskline by feratel

This site uses the Deskline reservation system via an API. The provider is feratel media technologies AG, Maria-Theresien-Straße 8, A-6020 Innsbruck.

When you open a page, your browser loads the required scripts into your browser cache in order to display the booking function correctly. For this purpose, the browser you are using must establish a connection to the feratel media technologies AG servers. This tells feratel media technologies AG that our website was accessed via your IP address. We do not know what other data is transmitted. When a visitor makes a booking or enquiry, the data provided by the visitor is also initially processed by Deskline. Deskline is used in the interest of making the booking process as simple and quick as possible.

For more information about Deskline, please visit: https://www.feratel.com/datenschutz

17 Scribble Maps

We use the Scribble Maps map service on our website. This is provided by 52 Stairs Studio Inc., located at 3035 Bouffard Rd. LaSalle, ON, N9H 1W4, Canada.

Scribble Maps offers the possibility to edit maps and enter destinations, routes and markers on them.

Personal data such as the IP address is passed on to Scribble Maps.

The processing of personal data is based on consent in accordance with
Art. 6 Para. 1 lit. a GDPR.

For further information on how we handle personal data, please see Scribble Maps’ privacy policy:

https://www.scribblemaps.com/privacy

18 ecMaps

We use the map service ecmaps on our website. This is provided by hubermedia GmbH, located at Gablerplatz 5, D-93462 Lamm.

The service enables us to provide tours and routes on the map. Personal data such as the IP address is passed on to hubermedia. The processing of personal data takes place on the basis of consent in accordance with
Art. 6 Para. 1 lit. a GDPR.

Further information on the handling of personal data can be found in hubermedia’s privacy policy:

https://www.hubermedia.de/datenschutz

â € ‹â €‹ â € ‹â €‹ â € ‹â €‹ â € ‹19 Vimeo

This website uses plugins from the video portal Vimeo. Provider is Vimeo Inc., 555 West 18th Street, NY, New York 10011, USA.

If you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers will be established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo is used in the interest of an appealing presentation of our online offerings. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.

For more information on how to handle user data, see Vimeo's privacy policy at: https://vimeo.com/privacy https://vimeo.com/privacy.

20 Eye Able

We use the Eye-Able® tool on our website. This is software from Web Inclusion GmbH, based at Gartenstraße 12c, 97276 Margetshöchheim.

We use the application to ensure that everyone has barrier-free access to information on our website.

The necessary files such as JavaScript, style sheets and images are loaded from an external server. When functions are activated, Eye-Able uses the browser's local storage to save the settings. All settings are only saved locally and are not transferred further.

To ward off attacks and provide our service in near real time, Eye-Able® uses the Content Delivery Network (CDN) of BunnyWay doo (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia).

It is used for the purpose of providing a barrier-free website.

The use is based on consent in accordance with Art. 6 (1) (a) GDPR.

All transmitted data and servers remain in the EU at all times to enable data protection-compliant processing in accordance with the GDPR. Web Inclusion GmbH does not record or analyze personal user behavior at any time.

You have the right to object to processing by Eye-Able at any time. In doing so, all personal data stored in connection with Eye-Able will be deleted.

In order to ensure data protection-compliant processing, Web Inclusion GmbH has concluded contracts for order processing with our hosts IONOS and BunnyWay. Further information can be found in the privacy statements:

https://eye-able.com/datenschutz/

https://bunny.net/privacy

21 Note on the privacy policy

Unless otherwise stated, our use of any information we have about you is subject to this Privacy Policy.

The controller reserves the right to continuously adapt this data protection declaration to the necessary security measures in accordance with technological developments and will announce any changes here.

Last update: July 24

22 Further information

22.1 Technical and organizational measures

The controller has taken technical and organizational measures to protect your data against loss, destruction or unauthorized access.

In addition, both the employees of the controller and any service providers are obliged to maintain confidentiality and to comply with data protection regulations.

22.2 SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as a site operator, our website uses an SSL or. TLS encryption. Thus, data that you submit via this website, for others not readable. You will recognize an encrypted connection at the "https: //" address bar of your browser and at the lock icon in the browser bar.
â € ‹â €‹ â € ‹â €‹ â € ‹â €‹ â € ‹