Data protection declaration

1. General Information and Mandatory Information

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

The person responsible pursuant to Art. 4 para. 7 of the Basic EU Data Protection Regulation (DS-GVO) is

Frankana®
Caravan und Freizeit GmbH
Spitzwasen 2
97340 Marktbreit
Germany

Tel. +49 93 39 97 13 - 600

Managing Directors:

Wilfried Neumann, Karsten Neumann, Klaus Büttner, Michael Fuchs

Revocation of your consent to data processing

Many data processing processes are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing up to the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based.

A list of data protection officers and their contact details can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion, correction

You have the right to free information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the scope of the applicable legal provisions. You can contact us at any time at the address given in the imprint if you have any further questions on the subject of personal data.

Right to data transferability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.

2. Data collection on our website

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These are:

• browser type and browser version
• operating system used
• Referrer URL
• host name of the accessing computer
• Time of the server request
• IP address

These data are not combined with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Contact form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent necessary for the establishment, content design or change of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data about the use of our Internet pages (usage data) only to the extent necessary to enable or invoice the user for the use of the service.

The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Registration on this website

You can register on our website to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.

In the event of important changes, such as the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data entered during registration will be processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing already carried out remains unaffected by the revocation.

The data collected during registration is stored by us as long as you are registered on our website and is subsequently deleted. Legal retention periods remain unaffected.

For orders via our website (shop)

You can either place orders as a guest on our website without registering, or register as a customer in our shop for future orders. A registration has the advantage for you that in case of a future order you can log in directly with your e-mail address and your password in our shop without having to enter your contact data again.

Your personal data is entered into an input mask and transmitted to us and stored. If you place an order via our website, we collect the following data both in the case of a guest order and in the case of registration in the shop:

• title, first name, surname
• a valid e-mail address
• address
• telephone number (landline and/or mobile)

This data is collected

• to identify you as our customer
• to process, fulfil and process your order
• to correspond with you
• for invoicing
• for the handling of any existing liability claims, as well as the assertion of any claims against you
• to ensure the technical administration of our website
• to manage our customer data

During the ordering process, you will be asked for your consent to the processing of this data.

The data will be processed upon your order and/or registration and is required pursuant to Art. 6 para. 1 S.1 lit. b DSGVO for the aforementioned purposes for the appropriate processing of your order and for the mutual fulfilment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored and subsequently deleted until expiry of the statutory obligation to store data, unless we are obliged to store data for a longer period due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to further storage in accordance with Art. 6 para. 1 S. 1 lit. a DSGVO.

Information disclosure

Your personal data will only be passed on by us to third parties to the partners involved in the execution of the contract, such as the trading and logistics company selected for delivery and the bank commissioned with payment matters. In the case of passing on your personal data to third parties, however, the scope of the transmitted data is limited to the necessary minimum. We would like to point out that we only act as intermediaries.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or "Purchase on account" via PayPal we pass your payment data on to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of the score values. For more privacy information, please see PayPal's Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your personal data will not be transmitted to third parties for purposes other than those mentioned above.

We will only pass on your personal data to third parties if:

• you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO to the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO being necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
• this is legally permissible and is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO.

In the course of the order process, you will be asked for your consent to pass on your data to third parties.

Use of cookies

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies / Persistent cookies

Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.

You can configure your browser settings according to your wishes and refuse the acceptance of third party cookies or all cookies, for example. Please note that you may not be able to use all functions of this website.

3. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both his website and his advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This will cause your IP address to be cut by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use all functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to this website: Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities for the use of Google Analytics.

4. Newsletter

If you want to subscribe to the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for the dispatch of the requested information and do not pass these on to third parties.

The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing processes already carried out remains unaffected by the revocation.

The data you provide us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

5. Data Protection Officer

We have appointed a data protection officer for our company.

If you have any questions, suggestions or comments on the subject of data protection, please contact our data protection officer by e-mail at

E-mail: datenschutz@frankanafreiko.de

Updated May 2018

Supplement to privacy policy when using Facebook and Instagram

1. General

We maintain publicly accessible profiles on various social networks. Your visit to these profiles initiates a variety of data processing operations. Below you will find an overview of which of your personal data is collected, used and stored by us when you visit our profiles. Personal data is information that can be assigned to you as a specific person (e.g. name, age, address, photos, e-mail addresses and possibly also IP addresses). Furthermore, we inform you about your rights with regard to the processing of your personal data. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you or only to a limited extent if you do not provide us with your personal data.

When you visit our profiles, your personal data is collected, used and stored not only by us, but also by the operators of the respective social network. This also happens if you yourself do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details on the collection and storage of your personal data as well as on the type, scope and purpose of their use by the operator of the respective social network, please refer to the privacy policy of the respective operator:

• The privacy policy for the social network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be viewed at https://www.facebook.com/about/privacy/update?ref=old_policy
• The privacy policy for the social network Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, can be viewed at https://help.instagram.com/155833707900388

2. Information on the collection of personal data

(1) The responsible person within the meaning of Art. 4 (7) GDPR is

Frankana®
Caravan und Freizeit GmbH
Spitzwasen 2
97340 Marktbreit
Tel. +49 93 39 97 13 - 600

(2) You can reach our data protection officer by e-mail at: datenschutz@frankanafreiko.de

(3) As the operator of a Facebook fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged in to it while accessing our fan page. In addition, Facebook provides us with anonymous usage statistics that we use to improve the user experience when visiting our fan page. We do not have access to the usage data that Facebook collects to create these statistics. Facebook has made a commitment to us to take primary responsibility under the GDPR for the processing of this data, to comply with all obligations under the GDPR in respect of this data and to provide data subjects with the substance of this commitment. This data processing serves our (and your) legitimate interest in improving the user experience when visiting our fan page in line with the target group. The legal basis for the data processing is therefore Art. 6 (1) f) GDPR. In addition, Facebook uses so-called cookies, which are stored on your end device when you visit our fan page, even if you do not have your own Facebook profile or are not logged into it during your visit to our fan page. These cookies allow Facebook to create user profiles based on your preferences and interests and to show you ads (inside and outside of Facebook) that are tailored to them. Cookies remain on your device until you delete them. For details, please refer to Facebook's privacy policy.

(4) If you use our profiles on social networks to contact us (e.g. by creating your own posts, responding to one of our posts or by sending us private messages), the data you provide us with will be processed solely for the purpose of contacting you. The legal basis for the collection of data is thus Art. 6 (1) a) and b) GDPR. We delete stored data as soon as their storage is no longer necessary or you request that we delete them; in the case of statutory retention obligations, we limit the processing of the stored data accordingly.

(5) We do not transfer your personal data to third parties as a matter of principle.

3. Your rights as a data subject

As a data subject, you have the following rights:

• You have the right to obtain information from us about the processing of your personal data within the scope of Art. 15 GDPR;
• You have the right, within the scope of Art. 16 GDPR, to demand that we immediately correct inaccurate personal data relating to you and/or complete incomplete personal data;
• You have the right to demand the immediate deletion of the personal data concerning you within the scope of Art. 17 GDPR;
• You have the right to request the restriction of data processing concerning you within the scope of Art. 18 GDPR;
• You have the right, within the scope of Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured and machine-readable format and to transfer this data to another controller;
• You have the right, within the scope of Art. 21 GDPR, to object at any time to the processing of personal data relating to you for reasons arising from your particular situation, provided that the processing is based on an overriding interest or your data is used for the purpose of direct marketing;
• You have the right to revoke your consent to data processing at any time, without this affecting the lawfulness of the data processing carried out on the basis of the consent until the revocation;
• You have the right to complain to a supervisory authority about our processing of your data.