Data Privacy on Our Website

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to any data that can personally identify you. For detailed information regarding data privacy, please refer to our privacy policy listed below this text.

1.1 Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website or in section 2.2.

1.2. How do we collect your data?

Your data is collected in part by you providing it to us. This may include data you enter into a contact form, for example. Other data is automatically collected by our IT systems when you visit the website. This primarily consists of technical data (e.g., IP address). This data is collected automatically as soon as you enter our website.

1.3. What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

1.4. What rights do you have regarding your data?

You have the right to obtain information about the origin, recipients, and purposes of your stored personal data at any time, free of charge. You also have the right to request the correction, blocking, or deletion of this data. For this purpose, as well as for any further questions regarding data privacy, you can contact us at any time using the address provided in the imprint. Furthermore, you have the right to file a complaint with the relevant supervisory authority.

Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. For details, please refer to the privacy policy under "Right to Restriction of Processing."

1.5. Analysis Tools and Third-Party Tools

When you visit our website, your browsing behavior may be statistically analyzed. This is primarily done using cookies and so-called analytics programs. The analysis of your browsing behavior is typically anonymous; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy.

2.1. Data Privacy
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data refers to data that can personally identify you. This privacy policy explains what data we collect and how we use it. It also clarifies how and for what purpose this data is processed. We would like to point out that data transmission over the internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

2.2. Information about the Responsible Entity
The responsible entity for data processing on this website is:

Emser Therme GmbH
Viktoriaallee 25
56130 Bad Ems

Andrea Meurer-Wiedmayer - Managing Director
Phone: 02603 9790-0
Fax: 06203 9790-99
Email: info@emser-therme.de

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

2.3. Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. An informal email to us is sufficient for revocation. The legality of data processing carried out before the revocation remains unaffected.

2.4. Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)

 If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data at any time; this also applies to profiling based on these provisions. The respective legal basis for each processing operation can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

2.5. Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

2.5.1 The competent supervisory authority for us is:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate P.O. Box 30 40, 55020 Mainz Phone: 06131 208-2449, Fax: 06131 208-2497 Email: poststelle@datenschutz.rlp.de

2.6. Right to Data Portability

You have the right to receive the data we process automatically based on your consent or in fulfillment of a contract in a common, machine-readable format, and to have it transferred to yourself or to another responsible party, as far as technically feasible if you request direct data transfer to another responsible party.

2.7. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and by the lock icon in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2.8. Encrypted Payment Transactions on this Website

If, after concluding a paid contract, there is an obligation to transmit your payment data (e.g., account number for direct debit), these data are required for payment processing. Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL/TLS connection. You can recognize an encrypted connection by the change in the browser's address line from "http://" to "https://" and by the lock icon in your browser line. When communication is encrypted, your payment data transmitted to us cannot be read by third parties.

2.9. Information, Blocking, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing at any time, as well as the right to correct, block, or delete this data if applicable. For this purpose, as well as for further questions regarding personal data, you can contact us at any time using the address provided in the imprint.

2.10. Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. For this, you can contact us at any time using the address provided in the imprint. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually require time to verify this. During the verification process, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

• If you have filed an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

When you have restricted the processing of your personal data, these data may only be processed – apart from their storage – with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

2.11. Objection to Promotional Emails

The use of contact information published in accordance with the imprint obligation for the purpose of sending unsolicited advertising and informational materials is hereby objected to. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of promotional information, such as spam emails.

3.1. Legally Required Data Protection Officer
We have appointed a Data Protection Officer for our company.

Mr. Bastian Hoffmann
Email: datenschutz@emser-therme.de

4.1. Cookies
Our website uses so-called cookies in some areas. Cookies do not harm your computer and do not contain viruses. They are designed to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are called "session cookies." They are automatically deleted after your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to notify you about the use of cookies and allow cookies only in specific cases, block cookies in certain situations or generally, and enable automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary for electronic communication or to provide specific functions you request (e.g., shopping cart functionality) are stored based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your browsing behavior) are stored, they are addressed separately in this privacy policy.

4.2. Server Log Files
he provider automatically collects and stores general data and information each time the website is accessed by a data subject or an automated system. This data is automatically transmitted by your browser.

This includes:

4.2.1. (Anonymized) Client IP
To detect potential attacks on our servers, the provider collects complete IP addresses, which are stored for seven days and then anonymized. As operators, we can only view the IP addresses in the log files in anonymized form, for example, 123.456.789.001 becomes anon-123-456-165-41.invalid.

4.2.2. Explanation
When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to: • deliver the contents of our website correctly, • ensure the permanent functionality of our information technology systems and the technology of our website, and • provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

We evaluate this data and information in an anonymous form in order to increase data security within our company and to ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

No merging of this data with other data sources takes place. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website, for which the server log files must be collected.

4.3. Contact Form
If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for any follow-up questions. We will not share this information without your consent.

The processing of the data entered in the contact form is thus based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal message to us via email is sufficient. The legality of data processing operations carried out before the revocation remains unaffected.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions - especially retention periods - remain unaffected.

4.4. Registration on this Website (Not applicable to this website)
You can register on our website to access additional features. We only use the data entered during registration for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as changes to the scope of services or technically necessary changes, we will use the email address provided during registration to inform you.

The processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time. An informal notification to us by email is sufficient. The legality of data processing carried out before the revocation remains unaffected. The data collected during registration will be retained by us for as long as you are registered on our website and will be deleted afterwards. Legal retention periods remain unaffected.

4.5. Processing of Data (Customer and Contract Data)
e only collect, process, and use personal data to the extent necessary for the establishment, content-related design, or modification of the legal relationship (inventory data). This is done based on Art. 6(1)(b) GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures. We collect, process, and use personal data concerning the use of our website (usage data) only to the extent necessary to enable the user to utilize the service or to bill the user.

The collected customer data will be deleted after the completion of the order or the termination of the business relationship. Legal retention periods remain unaffected.

4.6. Data Transfer
hen Contracting for Online Shops, Retailers, and Shipping of Goods (Not applicable to this website) We only transfer personal data to third parties if it is necessary for the fulfillment of the contract, for example, to companies entrusted with the delivery of goods or the financial institution responsible for payment processing. Further transmission of data does not occur or only if you have expressly consented to the transmission. Your data will not be disclosed to third parties for advertising purposes without your explicit consent.

The basis for data processing is Art. 6(1)(b) GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.

4.7. Data Transfer
hen Contracting for Services and Digital Content (Not applicable to this website) We only transfer personal data to third parties if it is necessary for the fulfillment of the contract, for example, to the financial institution responsible for payment processing.

Further transmission of data does not occur or only if you have expressly consented to the transmission. Your data will not be disclosed to third parties for advertising purposes without your explicit consent.

The basis for data processing is Art. 6(1)(b) GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.

5.1. Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies, which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analytical tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

5.1.1. IP Anonymization
We have activated the IP anonymization feature on this website. This means that Google will shorten your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

5.1.2. Browser Plugin
You can prevent the storage of cookies by adjusting your browser software settings accordingly. However, please note that if you do so, you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Link

5.1.3. Opt-Out of Data Collection
For more information on how Google Analytics handles user data, please refer to Google's privacy policy: Link

5.1.4. Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of German data protection authorities when using Google Analytics.

5.1.5. Demographic Features in Google Analytics
This website uses the "demographic features" function of Google Analytics. This allows reports to be generated that contain information about the age, gender, and interests of the site visitors. This data comes from interest-based advertising by Google and visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this feature at any time in the ad settings of your Google account or generally prohibit Google Analytics from collecting your data as described in the "Opt-Out of Data Collection" section above.

5.2. Google Analytics Remarketing

 Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows us to link target audience lists created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This way, interest-based, personalized advertising messages that have been adapted to your previous usage and browsing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).

If you have given appropriate consent, Google will associate your web and app browsing history with your Google account for this purpose. This way, the same personalized advertising messages can be displayed on any device you sign in to with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: [Link].

The aggregation of the data collected in your Google Account data is based solely on your consent, which you can give or withdraw from Google (Art. 6(1)(a) GDPR). For data collection operations that are not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.

For more information and the privacy policy, please refer to Google's privacy policy at: [Link]

5.2.1 Google Tag Management
Our website uses Google Tag Management (GTM). GTM allows us to manage website tags via an interface without having to modify the source code. The tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. GTM triggers other tags that may collect data. However, Google Tag Management does not access this data. It is used solely to activate other tags that may collect data. The use of GTM complies with privacy regulations and legal requirements.

5.3. Facebook Pixel
Our website uses the Facebook Pixel, an analysis tool from Facebook. This tool allows us to track the actions of users after they click on a Facebook ad and are redirected to our website. The Pixel enables an analysis of user behavior on our site, helping us make our Facebook advertising efforts more effective. The data collected by the Pixel is anonymous and does not provide us with insight into the identity of users. The use of the Facebook Pixel complies with applicable data protection regulations.

5.4. Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use the so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser places on the user's computer. These cookies lose their validity after 30 days and are not used to identify the user personally. If the user visits certain pages on this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords advertisers' websites. The information obtained through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

Storage of "conversion cookies" and the use of this tracking tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

For more information about Google AdWords and Google Conversion Tracking, please see Google's privacy policy: Link.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

6.1. YouTube
Our website uses plugins from the YouTube website, which is operated by Google. The operator of the YouTube pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

Furthermore, YouTube can store various cookies on your end device. With the help of these cookies, YouTube can obtain information about visitors to our website. Among other things, this information is used to collect video statistics, improve user-friendliness, and prevent fraud. The cookies remain on your device until you delete them.

If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

For more information on how YouTube handles user data, please refer to YouTube's privacy policy at the following link: Link

6.2. Google Maps
This page uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an attractive presentation of our online offers and easy location of the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

For more information on how Google handles user data, please refer to Google's privacy policy at the following link: Link

7.1. PayPal (not applicable to this website)
On our website, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. Revoking your consent does not affect the lawfulness of data processing that occurred before the revocation.

7.2. Sofortüberweisung (not applicable to this website)

On our website, we offer payment via "Sofortüberweisung" among other methods. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 München (hereinafter "Sofort GmbH"). By using the "Sofortüberweisung" method, we receive a real-time payment confirmation from Sofort GmbH and can immediately begin fulfilling our obligations. If you choose the "Sofortüberweisung" payment method, you will transmit your PIN and a valid TAN to Sofort GmbH, which will use them to log into your online banking account. After logging in, Sofort GmbH will automatically check your account balance and execute the transfer to us using the TAN you provided. It will then immediately transmit a transaction confirmation to us. Additionally, after logging in, your transactions, the credit line of your overdraft facility, the presence of other accounts, and their balances are automatically checked. In addition to the PIN and TAN, your payment data and personal information, including first and last name, address, phone number(s), email address, IP address, and any other data required for payment processing, will also be transmitted to Sofort GmbH. The transmission of this data is necessary to verify your identity without a doubt and to prevent fraud. The transmission of your data to Sofort GmbH is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. Revoking your consent does not affect the lawfulness of data processing that occurred before the revocation. For details on payment with Sofortüberweisung, please refer to the following links: [Link] and [Link]. The rapid development of the internet may require occasional adjustments to this privacy policy. You will be informed of any updates at this location, so we recommend that you visit this website regularly to stay informed about the protection and processing of your data.

Bad Ems, November 17, 2023