Privacy policy

Controller

Who processes the data

The controller for this website within the meaning of the GDPR are its operators. Which of them is your contracting party in a given case depends on the unit and is stated in the quote and on the invoice.

Controller

The operators of this website

Contact

info@rheinblick.de

Data protection officer

No data protection officer has been appointed, because the statutory conditions for doing so are not met.

Names, addresses and further mandatory details are in the imprint, which exists in German only: Imprint.

Technology

Cookies, fonts and maps

This website sets no cookies for visitors. Nothing is stored on or read from your device, neither for recognition nor for measurement nor for advertising. A session cookie arises only in the password protected administration area, which only we ourselves use. We embed external services only where they are necessary for operation, and we name each of them here.

Fonts

All fonts are loaded from our own server. No connection to third party servers takes place.

Maps

On the unit pages we merely link to Google Maps; it is only opened after a click and then under Google's responsibility. The holiday flats page carries an embedded overview map from Google. It does not load by itself: as long as you do not press “Load interactive map”, no connection to Google is established and no data is transmitted to Google. Only with your click is the map loaded, at which point Google receives your IP address and Google's privacy policy applies. The legal basis for this loading is your consent given by the click, Art. 6(1)(a) GDPR; it applies only to that one page view.

Audience measurement

On our own server we count which pages are opened, in order to see which content is needed. In this own counting no data is passed to third parties and no data is transferred to third countries; in addition we use Umami, described separately under the next point. Only daily totals are stored, in six counts kept separate from one another: how often a page was opened, which website visitors came to us from, what kind of device was used to read it (phone, tablet or computer), which country the access came from, how often a visitor moved from one of our pages to another, and how long a page was visible on average. For each of these, only a number per day is stored. From the referring website we take only the name of the site, never the full address, so a search term entered at a search engine never reaches us. The device type is limited to those three coarse cases; no further recognition of browser or version takes place. We derive the country from the IP address that technically arises on access; only the country code is stored, the IP address itself is neither stored nor logged by us. Movement between our pages is counted as a pair (“from page A to page B: 30 times”), not as the path of a particular person. We measure time on page only while the page is actually visible, capped at 30 minutes per view, and store from that only a total time and a count per page; the average is formed only at evaluation. Nothing is placed on your device for this: no cookie and no entry in session or local storage. Nothing is stored about you: no identifier, no attribute, and no link between the six counts. From “30 views on a phone” and “12 views from Switzerland” on the same day it cannot be derived which of them were the same person. Recognition is therefore technically impossible. We delete the daily figures after 90 days. The legal basis is our legitimate interest in designing the website to suit demand, Art. 6(1)(f) GDPR. Since nothing is stored on or read from your device, no consent under § 25 TDDDG (the German act implementing the ePrivacy rules) is required.

Umami

In addition to our own counting we use Umami, a web analytics service of Umami Software, Inc., 1111B South Governors Avenue, Dover, DE 19904, USA. Umami works without cookies: nothing is stored on or read from your device. Instead, on its own server Umami forms a checksum from your IP address, your browser identifier, the identifier of this website and a random value that changes daily. This allows views within one day to be attributed to one visit without identifying you. Because the random value changes daily, recognition beyond that day is technically impossible; the checksum cannot be reversed. Your IP address is processed in the course of this, but not stored. What is collected is the pages viewed, the referring website, the approximate location at country level, device type, screen size, browser and operating system. Umami is our processor under Art. 28 GDPR. In our Umami account we have selected the EU data region; processing and storage therefore take place on servers in the European Union. The provider is based in the USA, so access from a third country cannot be entirely ruled out; the EU Commission's standard contractual clauses apply for this. The legal basis is our legitimate interest in designing the website to suit demand, Art. 6(1)(f) GDPR. Since nothing is stored on or read from your device, no consent under § 25 TDDDG is required here either. You can prevent the collection by enabling the Do Not Track setting in your browser or by using a content blocker; the website then works unchanged.

Search Console

In addition we use the Google Search Console to see which search terms the site is found through. The data comes from Google and is provided there in aggregated form. Nothing is loaded and nothing is transmitted for this when you visit the website.

Consent

Because we set no cookies, store nothing on and read nothing from your device, and use no advertising networks, no consent banner is required. That also applies to the use of Umami described above, which works without cookies. Should that change, for instance through advertising, we will obtain your consent beforehand, and the technology concerned will load only after that.