Dear visitors,

Protecting your privacy is important to us! With the following information, we would like to inform you about how we handle your data collected when you use our website and our mobile applications.

Usage data

Cookies

Some of our websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

How can I prevent cookies from being stored?

You can set your browser to only accept cookies if you consent to them. You can delete any remaining cookies. However, disabling cookies may limit the usability of our website. Information on how to disable cookies can be found at the following link .

Google services
(Google Analytics, Google Universal Analytics and Google Doubleclick)

a) Google – Tools for pseudonymous analysis of user behavior

On our websites we use the analysis and advertising tools Google Analytics (including the functions of Universal Analytics) and Doubleclick by Google, from Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to make the use of our websites more convenient for our customers.

b) How do the tools work?

Google Analytics uses so-called “cookies” (see section 1), which are stored on your computer and which enable us to analyze your use of our website.

Universal Analytics allows us to analyze activity on our websites across devices (e.g., when accessed via a PC and later via a smartphone). This is done using a so-called user ID, a unique, non-personalized sequence of numbers that is not assigned to a specific device, but rather to the user personally as a pseudonym. Your user ID is assigned when you register on werder.de or log in to your existing customer account. Google only receives the user ID and the usage data associated with the user ID. This makes it impossible to assign the usage data to a specific person.

DoubleClick by Google also uses cookies to present ads that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser to check which ads are displayed in your browser and which ads have been viewed. The cookies do not contain any personal information. The use of DoubleClick cookies simply enables Google and its partner websites to display ads relevant to you based on previous visits to our website or other websites on the Internet.

c) What happens to the data?

The analysis data obtained through the applications is transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us as the website operator with other services related to website activity and internet usage. The data transmitted by your browser as part of Google services will not be merged with other Google data. To increase the protection of your data, we use Google Analytics and Universal Analytics with the extension "_anonymizeIp()". This means that IP addresses are only processed in abbreviated form, so that direct personal reference can be ruled out.

d) How can you object to the collection and processing of data?

By using our websites, you consent to the collection and processing of data by Google in the manner and for the purposes described above. However, you can withdraw your consent to the collection and/or processing of your data at any time with future effect:

You can prevent cookies from being saved by selecting the appropriate settings on your browser (see section 1 above); however, please note that if you do this, you may not be able to use the full functionality of the website.

You can also prevent Google Analytics and Universal Analytics from collecting and transmitting data to Google and from processing this data by Google by downloading and installing a browser plug-in available under the following link .

To deactivate the DoubleClick cookie, you can download and install the browser plug-in available under the DoubleClick Deactivation Extension at the following link . Alternatively, you can deactivate the DoubleClick cookies on the Digital Advertising Alliance website at the following link .

For more information about how Google uses cookies and how to disable them, please see the following link or the Google Ad Settings link .

Google AdWords – Conversion – Tracking

To evaluate and optimise our online advertising, we use so-called conversion tracking as part of the online advertising program “Google AdWords”. This helps us to recognise whether and how many users reach our website via Google advertising. If you click on a Google ad, Google places a so-called conversion cookie on your computer. This cookie has a lifespan of 30 days. If a user reaches one of our pages via one of our Google ads within these 30 days, Google and we can also recognise which ad this visitor reached us via. Personal data that could be used to identify individual visitors is not collected. We only receive a statistical evaluation of the total number of users who clicked on our ads and were directed to our site.

Further information on Google Conversion Tracking can be found at the following link .

You can object to the use of conversion cookies and thus prevent conversion tracking by:

Configure your browser so that it does not accept cookies. However, this may limit the use of our website and services, or

Disable interest-based ads from Google in the Google Ad Settings: http://www.google.com/settings/ads/onweb/?hl=de

Facebook – Pixel

With your consent, which you have given as follows:

“I agree to the use of the visitor action pixel.”

To evaluate our advertising measures on Facebook, we use another conversion tracking tool, Facebook Pixel, a service of

Facebook Inc.
1601 S. California Ave,
Palo Alto,
CA 94304,
USA.

With this service, we, and Facebook, can track user actions after they click on a Facebook ad. This allows us to record and evaluate the effectiveness of ads for statistical and market research purposes in order to optimize future advertising campaigns.

The data collected is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and allowing Facebook to use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy ( https://www.facebook.com/about/privacy/ ). You can allow Facebook and its partners to place advertisements on and outside of Facebook. Furthermore, a cookie may be stored on your computer for these purposes.

We only use Facebook Pixel if and to the extent that you have given us your express consent. Consent to the use of the visitor action pixel may only be given by users older than 13. If you are younger, we ask you to ask your legal guardian for permission.

You can revoke your consent at any time.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

Browser type/version

operating system used

Referrer URL

Hostname of the accessing computer

Time of the server request

This data cannot be assigned to specific individuals. This data will not be merged with other data sources. We reserve the right to subsequently review this data if we become aware of concrete evidence of illegal use.

Your personal data (inventory data)

What are “personal data”?

Personal data is information about you that allows conclusions to be drawn about your identity, such as your name, address, or telephone number. Information that does not allow conclusions to be drawn about a specific or identifiable person is not included.

Security of your data

We take all appropriate technical and organizational measures to ensure the protection of your data. Furthermore, all web forms you use to transmit sensitive data to us are encrypted, providing the best possible protection against unauthorized access.

Redirect to other websites

To expand our service offering, you will find links to other websites on our website, which are managed by other providers. Please refer to their privacy policies to learn about the extent to which our advertising partners collect personal data. You will recognize the redirection by the fact that a new browser window opens and a new address appears in the browser bar.

Facebook plugins (Like button)

Our website incorporates plug-ins from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plug-in by the Facebook logo or "Like" button on our page. An overview of Facebook plug-ins can be found here: http://developers.facebook.com/docs/plugins/ .

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook therefore receives the information that you have visited our page using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how Facebook uses it. For more information, see Facebook’s privacy policy at http://de-de.facebook.com/policy.php .

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

For details on the purpose and scope of data collection, as well as the further processing and use of the data by the networks, as well as your rights and setting options for protecting your privacy, please refer to the data protection information of the operator of the respective network:

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA http://www.facebook.com/about/privacy/

Google Inc., 1600 Amphitheater Parkway Mountain View, California, 94043, USA – http://www.google.com/intl/de/privacy/privacy-policy.html

a.) Privacy Policy for the Use of Xing
Our website uses features of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time you access one of our pages that contains Xing features, a connection is established to Xing servers. To our knowledge, no personal data is stored. In particular, no IP addresses are stored, and no user behavior is analyzed.

Further information on data protection and the Xing Share button can be found in Xing's privacy policy at https://www.xing.com/app/share?op=data_protection

b.) Privacy Policy for the Use of YouTube
Our website uses plug-ins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Further information on how user data is handled can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy

Engagement of external service providers:
Our primary focus is and remains relaxation and well-being. Therefore, we leave the technical implementation and maintenance of our website to experts who are more familiar with this. Our external service providers are obligated to comply with data protection regulations.

Contact form:
If you send us inquiries via the contact form, your information from the form, including the contact details you provide there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.

Your data protection rights.
According to Sections 34 and 35 of the Federal Data Protection Act (BDSG), you as a user (the law refers to this as the "data subject") have the right to request information at any time about what data we have stored about you and the purpose for which this data is stored. Furthermore, you can correct inaccurate data or delete data whose storage is inadmissible or no longer required. To exercise your rights, please contact our data protection officer (see Section 12).

c.) Fonts
This website uses "fonts.com," a font service provided by Monotype Imaging Holdings Inc. ("fonts.com"), Monotype GmbH, Horexstraße 30, 61352 Bad Homburg, Germany. Each time this website is accessed, files are downloaded from a "fonts.com" server to display the text in a specific font. Your IP address may be transferred to a "fonts.com" server and stored as part of the usual weblogs. The further processing of this information is the responsibility of "fonts.com." The corresponding conditions and settings options can be found in the privacy policy of "Monotype Imaging Holdings Inc.") https://www.monotype.com/de/rechtshinweise/datenschutzrichtlinie/

For your current browser session, you also have the option of completely removing the integration of the font service using the following buttons.

Data processing

We process your data based on

Your consent, Art. 6 (1) (a) GDPR
• to perform a contract with you, Art. 6 (1) (b) GDPR
• legitimate interests, Art. 6 (1) (f) GDPR (to improve our service, for statistical purposes and to protect against misuse)

Your personal data will not be passed on to third parties unless this is absolutely necessary for the processing of your service (billing of prescriptions with health insurance companies; booking of rooms as part of package deals with overnight stays; passing on your address to the postal service provider for the delivery of invoices, vouchers, confirmations or brochures; processing of payments for services).

User rights

As a user of our services, you have the following rights under the GDPR:

Right to information: Pursuant to Article 15 GDPR, you can request confirmation as to whether data concerning you is being processed. If this is the case, you have the right to information about the information being processed.
Right to withdraw consent: If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time in accordance with Article 7 GDPR.
Right to object: If the processing of your personal data is necessary to protect the legitimate interests of our company, you can object to the processing at any time in accordance with Article 21 GDPR.
Right to erasure: If you have withdrawn your consent, objected to the processing of your personal data (and there are no overriding legitimate grounds for the processing), your personal data are no longer necessary for the purposes of the processing, there is a corresponding legal obligation, or your personal data have been processed unlawfully, you have the right to request the erasure of your personal data in accordance with Article 17 of the GDPR. Users whose personal data is processed based on their consent also have a right to withdraw consent.
Right to rectification: If your personal data has been processed incorrectly, you have the right to request the immediate rectification of this data in accordance with Article 16 GDPR.
Right to restriction of processing: Under the conditions of Article 18 GDPR, you have the right to request the restriction of the processing of your personal data.
Right to data portability: According to Article 20 GDPR, you have the right to receive the personal data you have provided in a structured, common and machine-readable format.
Right to lodge a complaint: According to Article 13 GDPR, you have the right to lodge a complaint with the competent supervisory authority.

Data protection notice regarding the processing of personal data in the context of applications

In the following, we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the collection of personal data as part of the application process for employment at Wohlfühl-Therme Bad Griesbach.

The purpose of collecting data is to lawfully review your application as part of the application process. For this purpose, we store all data you provide to us as part of your application. Based on the data submitted as part of your application, we will check whether you can be invited to an interview as part of the selection process. If applicants are generally suitable, we will then collect certain additional personal data from you that is essential for the selection decision. If you are considered for employment, you will be informed separately about the personal data that will be collected as part of the recruitment process.

The legal basis for data collection and processing is the General Data Protection Regulation (Article 6 (1) GDPR, Article 9 (2) (b) and (h) GDPR, Article 88 (1) GDPR), which is supplemented by the provisions of the Federal Data Protection Act.

After collection, your data will not be passed on to anyone at Wohlfühl-Therme Bad Griesbach and will only be stored for as long as is necessary to fulfill the respective task, taking into account the statutory retention periods.

The data of competing applicants will be deleted no later than three months after the end of the tendering procedure (Section 15 (4) Sentence 1 AGG, analogous Section 4 KSchG).
In the case of applicants who are taken on as trainees or employees, the data will be deleted five years after the employee or trainee leaves the company in accordance with APIZ of the uniform filing plan.

We would also like to inform you about the rights you are entitled to under the GDPR:

If your personal data is processed, you have the right to receive information about the data stored about you (Article 15 GDPR).
If incorrect personal data is processed, you have the right to rectification (Article 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18 and 21 (1) GDPR).
Furthermore, you have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection.

Should you make use of the rights mentioned above, Wohlfühl-Therme

Bad Griesbach, whether the legal requirements for this are met.

If the deletion of application data is requested during the application process, this will be considered a withdrawal of the application.

Right of withdrawal in case of consent:

If you have consented to the processing of your data by Wohlfühl-Therme Bad Griesbach through a corresponding declaration, you can revoke your consent at any time with effect for the future. This does not affect the legality of the data processing carried out on the basis of your consent until the revocation.

Person responsible according to Art. 4 Para. 7 BDSG

Wellness thermal baths Bad Griesbach

(Own company of the Bad Griesbach Spa Association)
represented by the Plant Manager,
Thermalbadstr. 4,
94086 Bad Griesbach-Therme,
www.wohlfuehltherme.de; info@wohlfuehltherme.de; Phone: +49 (0)85 32/96 15 0

Data Protection Officer:

CD ADDATA GmbH, Ruhstorf an der Rott

Bad Griesbach in January 2024