{"id":79,"date":"2020-12-21T19:48:23","date_gmt":"2020-12-21T18:48:23","guid":{"rendered":"https:\/\/www.toernfinder.de\/?page_id=79"},"modified":"2026-09-23T13:55:59","modified_gmt":"2026-09-23T11:55:59","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.toernfinder.de\/en\/datenschutz\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\"><div class=\"vc_row wpb_row vc_row-fluid\"><div class=\"wpb_column vc_column_container vc_col-sm-12\"><div class=\"vc_column-inner\"><div class=\"wpb_wrapper\">\n\t<div class=\"wpb_text_column wpb_content_element\" >\n\t\t<div class=\"wpb_wrapper\">\n\t\t\t<h1>Privacy policy<\/h1>\n<p>Last updated: 09\/2026<\/p>\n<p><strong>Note on language version:<\/strong> Only the German version of this page is authoritative and legally binding. Versions in other languages are machine-generated translations and serve solely to improve comprehension. In the event of discrepancies or questions of interpretation, the German text shall prevail.<\/p>\n<hr \/>\n<p><strong>A.<\/strong> Privacy Policy for the Website<\/p>\n<p><strong>B.<\/strong> Privacy Policy for Social Media Presences<\/p>\n<hr \/>\n<h2>A. Privacy Policy for the Website<\/h2>\n<p>We process personal data (hereinafter \u201cdata\u201d) of users only to the extent necessary to provide a functional and comfortable website as well as our content and services.<\/p>\n<p>\u201cProcessing\u201d means the collection, use, disclosure and\/or storage. According to the General Data Protection Regulation (hereinafter \u201cGDPR\u201d), \u201cpersonal data\u201d generally means all data by which a natural person can be identified. The exact definitions of the terms are set out in Art. 4 GDPR.<\/p>\n<p>The following explanations inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, about the purposes and means of processing for which we alone or jointly with others decide, as well as about any third-party components we may use.<\/p>\n<hr \/>\n<p>I. Information about the controller<\/p>\n<p>II. Rights of the user<\/p>\n<p>III. Information on data processing<\/p>\n<hr \/>\n<h3>I. Information about the controller<\/h3>\n<p>The controller (hereinafter \u201ccontroller\u201d) within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection provisions is:<\/p>\n<p>Marcel Habeck<\/p>\n<p>T\u00f6rnfinder<\/p>\n<p>Schaphusenweg 10<\/p>\n<p>59494 Soest<\/p>\n<p>Telephone: +49 \/ (0)2921 \/ 344 378<\/p>\n<p>E-mail: info@toernfinder.de<\/p>\n<h3>II. Rights of the user<\/h3>\n<p>With regard to the processing of his\/her personal data described below, the user has the right<\/p>\n<p>1. to demand confirmation as to whether data concerning him\/her is being processed, as well as access to this data and further information and copies of the data in accordance with Art. 15 GDPR;<\/p>\n<p>2. to demand the immediate rectification of incorrect data concerning him\/her or the completion of this data pursuant to Art. 16 GDPR;<\/p>\n<p>3. to demand that data concerning him be erased without delay in accordance with Art. 17 GDPR, or \u2013 if further processing is required pursuant to Art. 17(3) GDPR \u2013 to demand a restriction of processing in accordance with Art. 18 GDPR;<\/p>\n<p>4. to receive the data concerning him that he has provided, in accordance with Art. 20 GDPR, and to demand that it be transferred to other controllers;<\/p>\n<p>5. to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR, if the user is of the opinion that the processing of his data violates the GDPR.<\/p>\n<p><strong>Right to object:<\/strong> The user may object at any time, in accordance with Art. 21 GDPR, to the future processing of data concerning him that takes place on the basis of Art. 6(1)(f) GDPR. The objection may in particular be raised against processing for the purposes of direct marketing.<\/p>\n<p>The controller is also obliged to notify all recipients to whom the personal data has been disclosed of any rectification or erasure of the data or any restriction of processing carried out pursuant to Art. 16, Art. 17(1) and Art. 18 GDPR, unless this proves impossible or involves disproportionate effort. The user has the right to be informed of these recipients.<\/p>\n<h3>III. Information on data processing<\/h3>\n<p>Insofar as no detailed information is provided below regarding the individual data processing operations, the processed data of the user will be erased or blocked as soon as the purpose of storage no longer applies and no statutory retention obligations prevent erasure.<\/p>\n<h3>Server data<\/h3>\n<p>For communication and security reasons, the following data is collected during a visit to the website, which is transmitted by the user's internet browser to the controller or to its hosting provider (so-called server log files):<\/p>\n<ul>\n<li>Browser type and version;<\/li>\n<li>operating system used;<\/li>\n<li>Website from which the user came to the website (referrer URL);<\/li>\n<li>page accessed;<\/li>\n<li>date and time of access;<\/li>\n<li>internet protocol (IP) address of the user.<\/li>\n<\/ul>\n<p>The legal basis for the temporary storage is Art. 6(1)(f) GDPR on the basis of the legitimate interest in improving the stability, functionality and security of the website. The data is anonymised after seven days at the latest. Data whose further storage is required for evidentiary purposes is excluded from anonymisation until the respective incident has been finally clarified.<\/p>\n<h3>Hosting<\/h3>\n<p>The website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact enquiries, meta and communication data, contract data, contact details and other data generated via the website.<\/p>\n<p>The host is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable and secure provision of our website possible. If corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG.<\/p>\n<p>The host is Raidboxes GmbH, Hafenstra\u00dfe 32, 48153 M\u00fcnster, Germany. A contract for data processing in accordance with Art. 28 GDPR has been concluded with the host.<\/p>\n<h3>SSL\/TLS encryption<\/h3>\n<p>For security reasons and to protect the transmission of confidential content, this website uses SSL\/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from \u201chttp:\/\/\u201d to \u201chttps:\/\/\u201d and by the padlock symbol in the browser line. When SSL\/TLS encryption is activated, the data you transmit to us cannot be read by third parties.<\/p>\n<h3>Cookies and consent management (Borlabs Cookie)<\/h3>\n<p>The controller uses cookies on its website. Cookies are small text files or other storage technologies that the internet browser used by the user places and stores on the end device. These cookies process certain user information to an individual extent.<\/p>\n<p>Technically necessary cookies, which are required for the operation of the website, are used on the basis of Art. 6(1)(f) GDPR and \u00a7 25(2) TDDDG. Cookies and services that are not technically necessary are only used with the consent of the user pursuant to Art. 6(1)(a) GDPR and \u00a7 25(1) TDDDG.<\/p>\n<p>To manage consents, the controller uses the consent management tool \"Borlabs Cookie\" from Borlabs GmbH, R\u00fcbenkamp 32, 22305 Hamburg. Borlabs Cookie stores the consent decision made by the user in a technically necessary cookie or in the browser's local storage, in order to be able to retrieve it on subsequent visits to the site. This data is not transmitted to Borlabs. The legal basis is Art. 6(1)(f) GDPR and \u00a7 25(2) TDDDG; the legitimate interest lies in the lawful management of consents given.<\/p>\n<p>\"Session\" cookies are deleted when the user closes their browser. \"Persistent\" cookies are automatically deleted after a period that depends on the respective cookie, but which does not exceed one year. The user can prevent or restrict the installation of cookies by setting their browser accordingly and can delete cookies already stored at any time. Once given, consent can be withdrawn by the user at any time with effect for the future via the cookie settings on the website. If cookies are restricted, this may mean that not all functions of the website can be used to their full extent.<\/p>\n<h3>Registration and contract processing<\/h3>\n<p>Users can register on the portal in order to create and publish, as an advertiser, listings for sailing trips, courses and seminars, as an advertising partner, adverts, or as an author, trip reports. The data entered during registration (e.g. name, address, e-mail address, indication of commercial\/private) is collected and stored for the establishment, performance and administration of the user relationship as well as for the processing of any subscriptions. Upon registration, the IP address as well as the date and time of registration are also stored.<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR (performance of a contract or implementation of pre-contractual measures). Data is not passed on to third parties outside the scope of contract processing; excepted from this is the disclosure to processors (e.g. hosting, e-mail dispatch) within the scope of the processing described below.<\/p>\n<p>Contract and billing data is deleted upon expiry of the statutory retention periods under tax and commercial law. An account that has been inactive for more than one year and for which no valid subscription exists may be deleted by the controller; the associated data is deleted insofar as no statutory retention obligations apply.<\/p>\n<h3>Publication of listings, adverts and provider and partner pages<\/h3>\n<p>The content provided by advertisers and advertising partners (in particular texts, images, contact and profile details) is published on the portal, including the display on the provider or partner overview page and the respective individual page. Publication takes place for the performance of the user contract on the basis of Art. 6(1)(b) GDPR. Insofar as the advertiser has provided its own legal notice and its own privacy policy on its provider page, it is solely responsible for their content.<\/p>\n<p>To promote the portal and the offers published on it, listing content (texts, images, the listing title and a link to the listing) is additionally published on the controller\u2019s social media channels, in particular on Instagram \u2013 including in time-limited formats (\u201cStories\u201d). The provider of Instagram is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; a transfer to the USA is possible. The basis for this is the licence granted by the listing provider under \u00a7 11 (2) of the General Terms and Conditions; the legal basis for the processing is Art. 6 (1) (b) GDPR (performance of the user or highlighting contract) and otherwise Art. 6 (1) (f) GDPR (legitimate interest in promoting the portal and the listings).<\/p>\n<h3>Automatic translation (Anthropic)<\/h3>\n<p>In order to offer the portal in English as well, the content published on the portal \u2013 in particular listings, adverts, provider and partner pages, trip reports, reviews and comments \u2013 is translated automatically. For this purpose, the texts to be translated are transmitted to an AI-based translation service. Insofar as the texts contain personal data (e.g. names or contact details), these are also processed. The translations are stored on the controller's server and displayed in the English version of the portal.<\/p>\n<p>The provider of the translation service is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Processing may also be carried out by Anthropic PBC in the USA; the transfer to the USA is safeguarded by EU standard contractual clauses (Art. 46(2)(c) GDPR). According to the provider, the transmitted content is not used to train AI models. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.<\/p>\n<p>The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in making the portal and the offers published on it accessible and understandable to international users as well.<\/p>\n<h3>Uploaded images (metadata)<\/h3>\n<p>If images are uploaded to the portal \u2013 for example for listings, adverts, the provider or partner page, or for trip reports \u2013 these image files may contain metadata (e.g. time of capture, camera or device information as well as location data\/EXIF data). This metadata may be accessible to third parties upon publication. The uploading user should remove any unwanted metadata prior to uploading. The respective uploading user is responsible for the uploaded content and the data contained therein.<\/p>\n<p>Uploaded images are stored in the website's media library and, for technical reasons, are accessible via a direct, publicly retrievable internet address (URL). This means they can also be accessed independently of the respective content page \u2013 for example by directly calling up the address \u2013 and can be indexed by search engines. Users should therefore not upload any images whose public accessibility is not desired.<\/p>\n<h3>Reviews<\/h3>\n<p>The controller may enable users to rate providers. In doing so, the content of the rating, the time it was submitted, and the name or chosen pseudonym provided by the user are stored and published \u2013 in particular on the respective provider page. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in operating a meaningful rating system and in informing other users. The controller is entitled to remove ratings in accordance with the terms of use.<\/p>\n<h3>Trip reports<\/h3>\n<p>Registered users (authors) may submit and publish trip reports. In doing so, the submitted content, including at least one image, as well as the name provided, are published. This processing is based on the author's consent pursuant to Art. 6(1)(a) GDPR, which is granted by submitting and publishing the content and may be withdrawn at any time with effect for the future.<\/p>\n<h3>Contact<\/h3>\n<p>If the user contacts the controller or a provider (e.g. via a contact form or by e-mail), the personal data entered in doing so is used to process the enquiry. The provision of the data is required in order to answer the enquiry.<\/p>\n<p>Messages sent to a provider via the contact form on a listing or provider page (first and last name, e-mail address, where applicable telephone number and address, as well as the message text) are stored on the portal, forwarded to the respective provider by e-mail and displayed in the provider's password-protected account area. The sender receives a confirmation of receipt by e-mail; the controller receives a copy of the message for quality assurance and abuse control. The provider then processes the data under its own responsibility in order to answer the enquiry. The messages stored on the portal are automatically deleted after six months.<\/p>\n<p>If the contact enquiry serves to fulfil a contract or to initiate a contract, the legal basis is Art. 6(1)(b) GDPR. Otherwise, the legal basis is the legitimate interest in processing the enquiry pursuant to Art. 6(1)(f) GDPR or consent pursuant to Art. 6(1)(a) GDPR, which may be withdrawn at any time pursuant to Art. 7(3) GDPR. Enquiries to the controller (e.g. via the general contact form or by e-mail) are deleted as soon as the enquiry has been conclusively answered and no statutory retention obligations prevent this. For messages to providers, the deletion period of six months stated above applies; this also applies to the copy held by the controller.<\/p>\n<h3>Sending of automated e-mails (Brevo)<\/h3>\n<p>For the reliable delivery of automated or transactional e-mails (e.g. confirmations of registration and subscription, notifications), the controller uses an external dispatch service provider. In doing so, in particular the recipient's e-mail address and the content of the respective message are processed.<\/p>\n<p>The provider is Brevo GmbH, K\u00f6penicker Str. 126, 10179 Berlin, Germany (server location EU).<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR, insofar as the dispatch serves to fulfil the contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in reliable and secure e-mail delivery). A data processing agreement pursuant to Art. 28 GDPR has been concluded with the service provider.<\/p>\n<h3>Management of contact data (Brevo)<\/h3>\n<p>The service provider named above is also used to maintain the contact data of users registered on the portal in distribution lists. The email address, first and last name and the status of a current or former listing or advertising subscription (active, cancelled, expired) are processed. The data is transferred automatically from the portal\u2019s user management and is kept up to date whenever it changes.<\/p>\n<p>The purpose is to provide registered users with targeted information. This includes notices about changes to the General Terms and Conditions, to prices or to this privacy policy, information about the subscription, and notifications about new or changed functions of the portal. The legal basis is Art. 6 (1) (b) GDPR where the information serves the performance of the contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in providing users with clear and up-to-date information about the portal and its functions). Purely promotional messages are sent via these lists only with express consent under Art. 6 (1) (a) GDPR.<\/p>\n<p>The provider is Brevo GmbH, K\u00f6penicker Str. 126, 10179 Berlin, Germany (servers located in the EU). A data processing agreement in accordance with Art. 28 GDPR has been concluded with the service provider.<\/p>\n<p>The contact data is stored there for as long as the user account exists on the portal. If the user account is deleted, the corresponding contact held by the service provider is deleted as well. Users may object to the processing at any time under Art. 21 GDPR.<\/p>\n<h3>Invoicing and accounting (sevDesk)<\/h3>\n<p>For the creation of invoices and for bookkeeping purposes, the controller uses the cloud-based accounting software \u201csevDesk\u201d. The provider is sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany. In this context, the data of the customer required for invoicing is processed, in particular name, address, invoice items and, where applicable, the VAT identification number.<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (fulfilment of tax and commercial law obligations). The data is stored for the duration of the statutory retention periods. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.<\/p>\n<h3>Direct marketing<\/h3>\n<p>The controller reserves the right to use the data collected in the context of a contractual relationship for direct advertising by e-mail or post pursuant to \u00a7 7 Abs. 3 UWG, unless the user objects to this use. The direct advertising exclusively comprises offers for similar services to those already used. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the economic interest in sales as well as the improvement of services. The user may object to this use at any time.<\/p>\n<h3>Comment function for blog posts<\/h3>\n<p>For the comment function on this website, in addition to the comment itself, the time of creation, the e-mail address and \u2013 unless the comment is made anonymously \u2013 the chosen name are stored. As comments are not necessarily checked before publication, we also store the author's IP address so that we can take action against the author in the event of legal infringements (e.g. insults). The comments remain on the website until the commented content has been deleted or the comments have to be removed for legal reasons. The legal basis for the publication of the comment is consent pursuant to Art. 6(1)(a) GDPR, which can be withdrawn at any time with effect for the future. The storage of the IP address is based on the legitimate interest pursuant to Art. 6(1)(f) GDPR in pursuing any legal infringements.<\/p>\n<h3>Shortlist \/ favourites function<\/h3>\n<p>The website offers a shortlist or favourites function that allows individual listings to be saved for the duration of the visit. For this purpose, a technically necessary cookie with the name \"tf_merkliste\" is set in the browser. It contains exclusively the numbers of the shortlisted listings and no personal data. The cookie has no expiry date and is deleted as soon as the browser is closed. No disclosure to third parties takes place. The storage is necessary to provide the shortlist function expressly requested by the user (\u00a7 25 Abs. 2 Nr. 2 TDDDG); consent is not required for this. The legal basis for the processing is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest in user-friendly functionality).<\/p>\n<h3>Google Maps<\/h3>\n<p>This website uses \u2013 only with the prior consent of the user \u2013 the map service \u201cGoogle Maps\u201d. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The parent company is Google LLC, USA. When activated, in particular the IP address and, where applicable, location data of the user are processed and transmitted to Google; transmission to the USA is possible.<\/p>\n<p>Google Maps is used exclusively on the basis of the user's consent pursuant to Art. 6(1)(a) GDPR and \u00a7 25(1) TDDDG. Consent can be withdrawn at any time with effect for the future via the cookie settings. The transfer of data to the USA is based on the adequacy decision of the EU Commission (EU\u2013US Data Privacy Framework) and, additionally, on the standard contractual clauses. Further information: https:\/\/policies.google.com\/privacy<\/p>\n<h3>OpenStreetMap<\/h3>\n<p>In order to show the location of trips, courses and seminars, the map service \u201cOpenStreetMap\u201d is used \u2013 only after the user has given prior consent. When the map is displayed, the map tiles are retrieved from the servers of the OpenStreetMap Foundation. In doing so, in particular the user\u2019s IP address, information about the browser and device used and the map section requested are transmitted to the provider.<\/p>\n<p>The provider is the OpenStreetMap Foundation, St John\u2019s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. An adequacy decision of the EU Commission is in place for the United Kingdom.<\/p>\n<p>The map is loaded only after the user has given consent; without consent no transmission takes place. The legal basis is the user\u2019s consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent can be withdrawn at any time with effect for the future via the cookie settings. The \u201cLeaflet\u201d program library used for the display is delivered from the controller\u2019s own server; it does not transmit any data to third parties itself. Further information: https:\/\/osmfoundation.org\/wiki\/Privacy_Policy<\/p>\n<h3>Web analytics with Trackboxx<\/h3>\n<p>This website uses the privacy-friendly web analytics service Trackboxx, provided by Trackboxx, Dorfstr. 12, 22956 Gr\u00f6nwohld, Germany. Trackboxx allows us to analyse user behaviour in order to improve the website, without setting cookies. No personal data is stored permanently: a hash value is generated from the visitor's IP address and further parameters, which recognises the visitor only for the duration of their visit to the website and is automatically deleted after 24 hours at the latest. Subsequent identification of individual visitors, or reconstruction of the IP address from the hash value, is not possible. Processing takes place on servers in Germany; the data is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a data-protection-compliant analysis of site usage). Further information: https:\/\/trackboxx.com\/datenschutzerklaerung\/<\/p>\n<h3>Integration of social media links<\/h3>\n<p>The controller uses links to social networks on the website. The integration takes place via a linked graphic. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective network. A transfer of personal data to the networks does not take place before clicking.<\/p>\n<p>After forwarding, information about the user is collected by the respective network (e.g. IP address, date, time and page visited). If the user is logged into their user account of the respective network during this process, the network operator can assign the information to the personal account. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in external representation and the improvement of usage quality.<\/p>\n<p>The following social networks are linked:<\/p>\n<ul>\n<li><strong>Facebook<\/strong> and <strong>Instagram<\/strong> \u2013 Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Private policy: https:\/\/www.facebook.com\/privacy\/policy<\/li>\n<li><strong>X<\/strong> \u2013 Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland. Privacy policy: https:\/\/x.com\/de\/privacy<\/li>\n<li><strong>LinkedIn<\/strong> \u2013 LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Privacy policy: https:\/\/www.linkedin.com\/legal\/privacy-policy<\/li>\n<\/ul>\n<hr \/>\n<h2>B. Privacy policy for social media presences<\/h2>\n<p>To promote our services and to communicate with interested parties or customers, we use so-called social media platforms. The following information informs you about the processing of personal data when you visit one of our company presences on a social media platform or get in touch with us via it.<\/p>\n<h3>I. Information on the joint controllers<\/h3>\n<p>For the social media platforms named below,<\/p>\n<p>Marcel Habeck<\/p>\n<p>T\u00f6rnfinder<\/p>\n<p>Schaphusenweg 10<\/p>\n<p>59494 Soest<\/p>\n<p>Telephone: +49 \/ (0)2921 \/ 344 378<\/p>\n<p>E-mail: info@toernfinder.de<\/p>\n<p>is jointly responsible with the respective platform operator named within the meaning of Art. 26 GDPR. Insofar as the respective platform operator provides an agreement on joint responsibility, it is linked below; this sets out who fulfils which obligations under the GDPR \u2013 in particular with regard to the exercise of data subjects' rights and the information obligations.<\/p>\n<ul>\n<li><strong>Facebook and Instagram<\/strong> Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Joint controller arrangement (Page Controller Addendum): https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum<\/li>\n<li><strong>LinkedIn<\/strong> \u2013 LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Joint controller arrangement (Page Insights Joint Controller Addendum): https:\/\/legal.linkedin.com\/pages-joint-controller-addendum. LinkedIn bases the transfer of personal data to the USA on the European Commission's standard contractual clauses.<\/li>\n<li><strong>X<\/strong> \u2013 Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland; parent company X Corp., USA. In this respect, too, joint responsibility exists with regard to the statistical data of the company page; a transfer of personal data to the USA is possible. Further information can be found in X's privacy policy: https:\/\/x.com\/de\/privacy<\/li>\n<\/ul>\n<h3>II. Rights of the user<\/h3>\n<p>Irrespective of the details of the agreement, you can assert your rights under the GDPR with and against each individual controller. The user is entitled to the rights specified under Section A.II (Art. 15 to 18, 20, 21 and 77 GDPR).<\/p>\n<h3>III. Information on data processing<\/h3>\n<p>When accessing the respective company presence (Facebook, Instagram, X and LinkedIn), the respective platform operator processes user data (e.g. personal information, IP address). From this data, the platform operators create aggregated, statistical information for the controller on the use of the company presence (so-called insights or statistics); the controller does not thereby receive access to the underlying personal data of individuals. The platform operators also use the data in particular for market research and advertising purposes and for creating usage profiles. If the user is logged into their account when accessing the page, the platform operator can link the data to the respective user account.<\/p>\n<p>The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the analysis, communication and promotion of the services. The legal basis may also be consent pursuant to Art. 6(1)(a) GDPR given to the respective platform operator, which can be withdrawn from that operator at any time. Further details on the respective processing activities can be found in the data protection notices and agreements of the platform operators linked under Section B.I.<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Datenschutzerkl\u00e4rung Stand: 09\/2026 Hinweis zur Sprachfassung: Ma\u00dfgeblich und rechtsverbindlich ist ausschlie\u00dflich die deutsche Fassung dieser Seite. Fassungen in anderen Sprachen sind maschinell erstellte \u00dcbersetzungen und dienen allein der besseren Verst\u00e4ndlichkeit. Bei Abweichungen oder Auslegungsfragen gilt der deutsche Text. A. Datenschutzerkl\u00e4rung f\u00fcr die Webseite B. Datenschutzerkl\u00e4rung f\u00fcr Social-Media-Auftritte A. Datenschutzerkl\u00e4rung f\u00fcr die Webseite Wir verarbeiten personenbezogene&hellip;<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-79","page","type-page","status-publish","hentry","description-off"],"_links":{"self":[{"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/pages\/79","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/comments?post=79"}],"version-history":[{"count":4,"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/pages\/79\/revisions"}],"predecessor-version":[{"id":1562290,"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/pages\/79\/revisions\/1562290"}],"wp:attachment":[{"href":"https:\/\/www.toernfinder.de\/en\/wp-json\/wp\/v2\/media?parent=79"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}