Data privacy information of HDN Management GmbH

HDN Management GmbH of Neuteichnitzer Straße 26 in 02625 Bautzen has committed to configuring its services in compliance with the applicable provisions of law, protecting personal data and abiding by the principles of data security.

The following is to inform you about the circumstances under which we collect information about you, how we treat such information and to whom we disclose it if necessary.

Data privacy information of HDN Management GmbH

HDN Management GmbH of Neuteichnitzer Straße 26 in 02625 Bautzen has committed to configuring its services in compliance with the applicable provisions of law, protecting personal data and abiding by the principles of data security.

The following is to inform you about the circumstances under which we collect information about you, how we treat such information and to whom we disclose it if necessary.

Data processing in case of access via the Internet

Whenever a user accesses our websites, data relating to that event are stored and processed temporarily in a log file.

The following data will be captured and stored until automatic deletion:

• the inquiring computer’s IP address,

• the date and time of access,

• the name and URL of the file accessed,

• notice of successful or failed access,

• identification data of the browser and operating system used,

• the website from which access was made, and

• the name of your Internet access provider.

The processing of such data serves to facilitate the use of the website (connection setup), to maintain system security and the technical administration of the network infrastructure, and to optimize our Internet services. The aforementioned data are analyzed merely for statistical purposes and for the improvement of services and then deleted. The IP address can in principle only be analyzed in case of attacks on the network infrastructure.

No personal data will be processed except as set forth in the data privacy statement unless you give your explicit consent to further processing.

Core data

HDN Management GmbH processes your personal data, which are needed for the formation, the content and structure or the modification of the contractual relationship (core data), exclusively for the performance of the contract concluded between you and HDM Management GmbH. Such data are processed only for correspondence with you and only for the purpose for which you made them available to us.

As a rule, the following data from the contact form, the reservation form and/or the registration for our newsletter will be stored as core data:

• title,

• given names, surname,

• address (street, number, post code, city/town/village, country),

• email address,

• phone number,

• date of journey,

• charter period and

• the preferred mode of contact by email or telephone.

Any further use of core data for advertising purposes, market research or public opinion research requires your explicit consent, which can be given in the registration process. Consent is given on a voluntary basis and may be revoked at any time.

Transaction data

Personal data required for the utilization and invoicing of services (transaction / usage data) are used to perform the contracts concluded. Such usage data include details of the beginning and end of registration and of the scope of the specific contractual services.

As far as required, the usage or transaction data relating to invoicing (invoicing data) are stored until the lapse of any retention period prescribed by law, contract, or articles of association.

Transaction data

Personal data required for the utilization and invoicing of services (transaction / usage data) are used to perform the contracts concluded. Such usage data include details of the beginning and end of registration and of the scope of the specific contractual services.

As far as required, the usage or transaction data relating to invoicing (invoicing data) are stored until the lapse of any retention period prescribed by law, contract, or articles of association.

Email correspondence

We use filters against unsolicited advertisements (“SPAM filters”), which may in rare cases erroneously classify even normal emails as unsolicited advertisements and delete them automatically. Emails containing malware (“viruses”) will also be deleted automatically.

Moreover, to comply with the statutory recording obligations we archive emails in audit-proof form using the david® programme of Tobit Software AG; Parallelstraße 41 in 48683 Ahaus.

Newsletters

If you use your email address to register for our [interval e. g. monthly] newsletter providing information on our charter services, we use your email address for our own advertisements until you unregister from the newsletter mailing (cancellation option at the end of the newsletter). As a newsletter distribution list we use the Mailchimp programme of The Rocket Science Group, LLC; 675 Ponce de Leon Ave NE; Suite 5000, Atlanta; GA 30308 USA.

Use of cookies / E-tracking programmes / Social plug-ins

Cookies

As far as your security settings permit, we use cookies in order to extend the functional scope of our online services while making them more comfortable for you to use. With the help of such cookies, text files can be stored in your computer upon access to our website. You have the possibility to prevent the storage of cookies in your computer by setting your browser accordingly. However, this might limit the functional scope of our online services.

Cookies used include both our own and third-party cookies. In the log-in procedure we use our own session cookies, which are automatically deleted after a 15-minute period. To exclude cookies from other providers, you may exercise your right to object.

E-tracking programmes

To optimize our Internet services and tailor them to suit the needs of customers by statistical analysis of use patterns, we use implemental web analytics technologies. As a rule, this does not involve the collection of personal data or if so, such data are used in anonymized form only. Technological solutions used include in particular:

• Google Analytics (IP address shortened by anonymization of the last digits)

This website uses Google Analytics, a web analytics service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies which are stored in your computer and make it possible to analyze its use. The cookies used include Google’s own as well as third-party cookies (from external providers). As a rule, the information generated by the cookies about your use of this website is transferred to, and stored in, a Google server in the USA. To ensure processing complies with the requirements of data protection we use the code „gat._anonymizeIp();“ in order to guarantee the anonymized collection of IP addresses (known as IP masking).

You may object to data collection at any time with future effect by using the following link and downloading and installing the browser add-on for deactivation of Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de.

Data collection by Google Analytics can also be prevented by placing an opt-out cookie; this requires the permanent acceptance of an opt-out cookie from: ________________________.

For more detailed information on the conditions of use and on data protection, see https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

• Google Adwords Conversion Tracking

In addition, we use the online advertising programme Google AdWords Conversion Tracking. Google Conversion Tracking is an analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). If you click an advertisement placed by Google, a cookie for conversion tracking is deposited in your computer. Such cookies become invalid after 30 days and do not contain any personal data. The information obtained through the conversion cookie serve to prepare conversion statistics (e.g. the total number of users clicking an advertisement, forwarded conversion tracking tag page). However, it is impossible to create personalized user profiles.

If you choose not to take part in tracking, you can reject the necessary placement of a cookie – e.g. by a browser setting which deactivates the automatic placement of cookies in general or by setting your browser to block any cookies from the “googleleadservices.com” domain.

For further information on Google’s data protection policy, see: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/.

Social plug-ins

Our website uses browser plug-ins and links of social networks (e.g. Facebook, XING, Google Plus, Linkedin, Twitter) which are identified by their respective logos or other information. All of these social networks are operated by third parties, some of which have their registered offices outside Europe. As a result, it may not in each case be possible to guarantee an adequate level of data protection as defined in Article 44 of the GDPR (with due regard given to, and interpretations made in line with, Section 78 of the DSAnpUg-EU/ BDSG as amended). Utilization of a browser plug-in may result in an automatic connection to the server of the network involved, however it can be restricted by means of a browser add-on, e.g. the script blocker “NoScript” (http://noscript.net/).

• Facebook

We use the plug-in of the social network facebook.com (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA). If you view any part of our website equipped with such a plug-in, a connection to the Facebook servers (including in third states) is made. In the process, the plug-in is displayed on

Right to information, objection, deletion and restricted processing of data; right to file a complaint with the data protection authority

HDN Management GmbH will always inform you about your personal data or correct or delete them at any time if you object to the use of such data or if we are under a contractual, statutory or official obligation to do so. Should deletion conflict with any retention obligations defined by law, contract or articles of association, require unreasonable effort or impair your legitimate interests, deletion is superseded by limitation of processing.

Moreover, you have the right to file a complaint with a supervising authority if you hold the opinion that processing of your personal data violates any standards of data protection law.