Data Privacy Statement
Data Privacy Statement
Thank you very much for your interest in our company! Protecting your data is a very high priority for the management team at Tegernseer Tal Tourismus GmbH. It is also possible to visit the webpages of Tegernseer Tal Tourismus GmbH without providing any personal data.
Should you wish to make use of our company's particular services (such as our contact form) via its website, however, some of your personal data will need to be processed.
This data privacy statement explains in detail how we use analytics and tracking tools. It can also show you various ways to block analytics and tracking either partially or entirely in specific situations, as well as how you can delete corresponding cookies after the fact.
Name and address of website operator:
Tegernseer Tal Tourismus GmbH
Tel.: +49 8022 927380
Contact information of data protection officer:
Tel.: +49 8022 9273831
1. What data do we use?
a) When you visit our website
When you access our website, your browser automatically transmits information to our server. This information is temporarily stored in a log file. Without any action on your part, the following information is collected and saved until it is automatically deleted:
IP address of the computer requesting our website
Date and time of access
Name and URL of the file accessed
Website from which the access originated (“referrer URL”)
Browser you use and (if applicable) your computer's operating system and the name of your access provider
We process the data specified above for the following purposes:
To ensure you can establish a smooth connection to our website
To ensure that our website is easy to use
To analyse system security and stability
Other administrative purposes
The legal basis for this data processing is provided by Art. 6, para. 1(1)(f) of the EU’s General Data Processing Regulation (GDPR). The purposes listed above demonstrate our legitimate interest in collecting such data. Under no circumstances do we use the data we collect to draw conclusions about our website's users.
b) Using our contact form
If you have questions of any kind, you can use the form we provide on our website to get in touch with us. This requires you to enter a valid e-mail address, a salutation, and your first and last name so that we know who has submitted a request and can respond to it. You can also include further information at your discretion. In this context, we process data for communication purposes in accordance with Art. 6, para. 1(1)(a) of the GDPR. The data we collect when you use our contact form is automatically deleted once your enquiry has been addressed unless your contacting us leads to a request for services or you wish to make further enquiries.
C) Collection of personal data for contract fulfilment
For technical reasons, additional personal data is collected for the purposes of contract fulfilment if you use our gift voucher tool. This also involves the transmission of payment information to your choice of payment service provider in order to verify your financial standing and complete the billing process. In specific terms, this data includes:
When purchasing a gift voucher:
Your full name and address
Your home address
Your e-mail address
Payment information (amount, method of payment, and account or card information if applicable)
Acknowledgement of our terms, conditions, and data privacy statement
To authorise credit card payments, every payment transaction also requires a card verification code. This code will not be stored.
When redeeming a gift voucher:
The voucher number for every booking
The amount, date, and time
The name of the partner company
If you use our gift voucher tool, we work with a third-party data processor with which we have a contract within the meaning of Art. 28 of the GDPR. In cases where they are not data controllers themselves within the meaning of Art. 4(7) of the GDPR, we also have corresponding agreements with our partner companies.
2. Transmission of data
Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only transmit your personal data to a third party under the following circumstances:
You have granted your express consent in accordance with Art. 6, para. 1(1)(a) of the GDPR
The transmission is required to enforce, exercise, or defend legal claims in accordance with Art. 6, para. 1(1)(f) of the GDPR and there is no basis on which to assume that you have a legitimate overriding interest in preventing the transmission of your data
The transmission is required by law in accordance with Art. 6, para. 1(1)(c) of the GDPR
The transmission is permitted by law and required in order to fulfil our contractual relationship with you in accordance with Art. 6, para. 1(1)(b) of the GDPR
3. Rights of the data subject
As a data subject, you have the following rights:
To request information about the personal data we process in accordance with Art. 15 of the GDPR. In particular, you are entitled to information on the purposes of this processing; the personal data categories involved; the categories of the recipients to which your data has been or will be disclosed; the planned storage period; your right to have your data corrected or deleted, to restrict the processing of your data, to object to this processing, and to file a related complaint; the origin of your data (in cases where it was not collected by us); and whether we use an automated decision-making system (including profiling), along with meaningful details on any such system.
To request that your personal data be corrected or completed immediately in accordance with Art. 16 of the GDPR
Request that your personal data be deleted in accordance with Art. 17 of the GDPR, provided that processing it is not required to exercise the right to freedom of expression and information; to fulfil a legal obligation; to preserve matters in the public interest; or to enforce, exercise, or defend legal claims
To restrict the processing of your personal data in accordance with Art. 18 of the GDPR in cases where you dispute the correctness of this data; the processing of the data is not legal, but you do not want it to be deleted, we no longer require it, and you need it to enforce, exercise, or defend legal claims; or you have objected to the processing of your data in accordance with Art. 21 of the GDPR
To receive the personal data you have provided to us in a structured, accessible, and machine-readable format or have it transferred to another data controller in accordance with Art. 20 of the GDPR
To revoke the consent you previously granted to us at any time in accordance with Art. 7, para. 3 of the GDPR. As a result, we will no longer be permitted to carry out the data processing to which you agreed from that point forward.
To file a complaint with an oversight authority in accordance with Art. 77 of the GDPR. In most cases, you can contact the oversight authority responsible for your place of residence, your place of work, or our place of business.
4. Right to object
In cases where your personal data is processed based on legitimate interests within the meaning of Art. 6, para. 1(1)(f) of the GDPR, you have the right to object to said processing in accordance with Art. 21 of the GDPR, provided that there are reasons related to your particular situation or you wish to object to direct marketing activities. In the latter case, you have a general right to object and to have us accommodate your wishes without having to provide information on your particular circumstances. If you wish to exercise your right to object or to revoke your consent, please send an e-mail to firstname.lastname@example.org.
5. Data security
Within our website, we utilise the widely used Secure Socket Layer (SSL) protocol in combination with the highest level of encryption supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, our website reverts to 128-bit SSLv3 technology. You can tell whether each page of our website is being transmitted in encrypted form based on whether a key or lock icon is displayed in the status bar of your browser window.
In addition, we employ appropriate technical and organisational security measures to protect your data against random and targeted manipulation, partial and complete loss, destruction, and unauthorised third-party access. We also make an ongoing effort to optimise these security measures in line with the latest technological advancements.
6. Use of tracking and analytics tools
The following section provides a brief explanation of cookies, which we use for various purposes.
Cookies are small files that contain a unique code of numbers, letters, and other symbols. They are stored in a directory associated with your computer's browser or on your mobile device. The code determines each cookie's particular function and the amount of time after which it will be deleted. You can also delete all cookies yourself at any time via your browser's settings or using a program for clearing cookies (CCleaner, for example).
Along with cookies, we utilise tracking technologies that provide similar functions. These may include tracking pixels (also known as pixel tags, web bugs, or GIFs), tracking URLs, or software development kits (SDKs). A tracking pixel is a graphic consisting of a single pixel that is sent to your computer via a website query, an advertisement, or e-mail HTML. Tracking pixels can be used to request data from your device – the device type, operating system, or IP address, for example, or the time at which you visited our website. Pixels are also used to query cookies in your browser. Tracking URLs are a means of identifying websites that refer visitors to our website. SDKs, meanwhile, are small code components within apps that function in a manner similar to cookies and tracking pixels.
In the remainder of this document, we will use the general term “cookies” to refer to all these technologies.
Based on their function and purpose, cookies can be divided into four categories*[TJS1] :
Functionally essential cookies
Cookies for marketing purposes
You can use your browser's settings to block all cookies (or only specific ones) at any time. If you do, our website may no longer be displayed as intended, or it may produce errors. To learn more about how to manage and delete cookies, please refer to your browser's integrated help feature.
The following links offer further information on deactivating or managing cookies in your browser's settings:
Google Chrome: https://support.google.com/chrome/answer/95647
Internet Explorer: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
a) Cookies we use that are not subject to consent – technical and functionally essential cookies
Essential cookies (technical cookies and those required for our business purposes) ensure functions that display our website as intended and prevent errors from occurring. These first-party cookies are used exclusively by us.
In addition to these technical cookies, we employ functional cookies that are necessary to offer an efficient, user-friendly experience on our website. This includes displaying the website in your preferred language and currency, responding to your search queries, and indicating the webpages you have already visited. These functional cookies are also essential to our website's functions because they help make your visit as pleasant as possible. Furthermore, they make it possible to generate reports on web activity.
According to Art. 6, para. 1(f) of the GDPR, our legitimate interests provide the legal basis for the use of all necessary cookies.
List of cookies we use that do not require consent
First-party cookies: consentCookie
Duration: One year
Category: Functional cookie
First-party cookies: formInfo
Purpose: This cookie is used to prevent form tracking when a user revisits a webpage after logging in or out.
Duration: Five seconds
Category: Functional cookie
First-party cookies: JSESSIONID
Purpose: This cookie is used as part of the session management mechanism. It expires at the end of every session. It is also used to transmit unknown incoming GET parameters (e.g. newsletter traffic, PII solution) to outgoing links related to PuW. Further information: https://en.wikipedia.org/wiki/Session_ID
Category: Technical cookie
First-party cookies: rememberMeGlobalToken
Purpose: This cookie supports “remember me” functionality. It is used to access data on users the next time they visit our website. It is stored when the user has logged in and activated the “stay logged in” option.
Duration: Two weeks
Category: Technical cookie
First-party cookies: fontSize
Purpose: This cookie contains information on the font size the user has selected.
Category: Technical cookie
b) Cookies that require your consent
In addition to the technical and functionally necessary cookies described above, we use our own analytics cookies to gain insights into how you use our website, which enables us to improve it and analyse the effectiveness of ads and messages. The information we collect in this context is aggregated and later evaluated in an anonymised format.
Along with our own cookies, we work with a number of advertising partners that help us make our website and overall online presence more interesting to you. This is why third-party cookies from these partner companies are stored on your computer for marketing purposes when you visit our website. These cookies also have a defined purpose and a length of time after which they are automatically deleted. You can also delete all cookies yourself at any time via your browser's settings or using a program for clearing cookies (CCleaner, for example).
List of cookies we use that require consent
Purpose: The Facebook pixel is an analytics tool that makes it possible to gauge the effectiveness of advertising and segmentation based on user behaviour.
Duration: 30 days
Category: Marketing cookie
Purpose: This cookie is set when explicit consent is given and the user is logged into Facebook.
Duration: Three months
Category: Marketing cookie
We use Google Analytics, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics utilises cookies, which are small text files that are stored on your computer and enable Google to analyse how you use our website. The information these cookies collect on the use of our website and apps (which includes your IP address) is typically transmitted to a Google server in the United States and stored there.
On our website, the code “gat._anonymizeIP();;” is added to Google Analytics cookies to ensure that IP addresses are collected in an anonymised format (by means of IP masking). This means we instruct Google to only collect a truncated version of your IP address, which safeguards your anonymity and prevents conclusions from being drawn about your identity.
Thanks to our website’s IP anonymisation, Google will truncate your IP address in advance in member states of the European Union and other nations that are signatories of the EEA Agreement. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and truncated there.
Google will use the information specified to analyse how you use our website and apps, to generate reports for us on our website activity, and to provide us with further services related to the use of our website. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data. Google will only transmit this data to third parties on the basis of legal requirements or as part of third-party data processing. Under no circumstances will Google combine your information with other data it collects. If you grant your consent when presented with the choice by our website, you acknowledge your agreement to having Google process the data collected on you in the manner described above for the purposes specified.
In addition to the options described herein, you can prevent Google from collecting and processing the data generated by the cookies in question regarding your use of this website (including your IP address) by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout. Further details on Google Analytics and data privacy in general are available here: http://tools.google.com/dlpage/gaoptout[TY2]
Google Tag Manager
We make use of Google Tag Manager to manage website tags by means of an interface. Google Tag Manager does not require cookies and does not collect any personal data. It merely triggers other tags that may perform their own data collection. Our data privacy statement includes corresponding explanations of the respective third-party providers. If you have set your browser to block cookies or have achieved this by some other means, this will apply to all tracking tags employed using Google Tag Manager; in other words, the tool will not modify your cookie settings.
Google may ask for your permission to pass some product data (e.g. your account information) on to other Google products in order to activate certain functions. This could involve simplifying the addition of new conversion tracking tags for AdWords, for example. Google's developers also review information on product use from time to time to continue improving their products. However, Google will never pass data of this kind on to other Google products without your consent.
Our website uses Google Fonts. It does so without authentication, and no cookies are sent to the Google Fonts API. If you have a Google account, none of your Google account information will be transmitted to Google during our use of Google Fonts. Google merely collects data on the use of CSS and fonts and stores it in a secure manner. More information on this subject and other issues is available at https://developers.google.com/fonts/faq?tid=231551357646.
In addition to the options offered here, you can utilise Google Webfonts Helper to host fonts on your own server so that no connection to Google is established.
Our website uses the tracking pixel provided by the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our website, this tracking pixel establishes a direct connection between your browser and a Facebook server. Among other information, this sends a notification to Facebook that your computer has accessed our website. If you are a Facebook user, this will enable Facebook to associate your visit with your user account. When your browser visits a page that contains the Facebook pixel, Facebook can also ascertain whether one of its ads was successful (having resulted in a hotel booking, for example). This enables us to determine how effective Facebook ads are for our own statistical and market research purposes. The methods we apply in doing so ensure that no data – in particular, none of our visitors’ e-mail addresses – are transmitted to Facebook in an encrypted or unencrypted format.
Our company (the “data controller” within the meaning of the GDPR) has integrated components from YouTube into this website. YouTube is an online video portal that enables users to publish, watch, rate, and comment on videos free of charge. It permits the publication of all types of videos, from entire films and television programmes to music videos, trailers, and user-generated content, and makes them accessible via the Internet.
Our website uses components that facilitate the integration of YouTube, which is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Whenever you access one of our webpages that contains an integrated YouTube component (read: a YouTube video), your browser will be instructed to download the corresponding component from YouTube. Further information on YouTube is available at https://www.youtube.com/yt/about. In the course of this technical procedure, YouTube and Google will receive information on the specific page you are visiting on our website.
Our website also uses components (plugins) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. These plugins are marked with an Instagram logo – the “Instagram camera” icon, for example. An overview of Instagram's plugins and how they appear is available here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges. If you visit a page of our website that contains an Instagram plugin, your browser will establish a direct connection to Instagram's servers. The plugin's content will be transmitted from Instagram directly to your browser and incorporated into the page. Through this integration, Instagram will receive information regarding the page your browser has accessed, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (which includes your IP address) will be transmitted by your browser directly to an Instagram server in the United States and stored there.
If you are currently logged into Instagram, Instagram will be able to associate your visit to our website directly with your Instagram account. If you interact with Instagram plugins (e.g. by clicking an “Instagram” button), this information will also be transmitted directly to an Instagram server and stored there. Furthermore, it will be published on your Instagram account and made visible to your Instagram contacts.
For further information on the purpose and scope of the data collected, how Instagram processes and uses this data, your corresponding rights, and settings you can configure to protect your privacy, please refer to Instagram's data policy: https://help.instagram.com/155833707900388/
In addition to the options provided here, you can prevent Instagram from associating the data collected through our website directly with your Instagram account by logging out of Instagram before you visit our website. You can also block Instagram plugins entirely in your browser using an add-on such as the script blocker NoScript (http://noscript.net/)
Cookies are small text files that websites use to ensure a more efficient user experience.
According to the applicable laws, we are permitted to store cookies on your device when they are essential to operating our website. All other types of cookies require your consent.
This website uses different types of cookies. Some of those that appear on our pages are placed there by third parties.
You can modify or revoke your consent at any time by means of the cookie statement on our website.
For more information about who we are, how you can contact us, and how we process personal data, please refer to the corresponding sections of this data privacy statement.
If you wish to contact us regarding your consent, please include your consent ID and the current date in your message.
Your consent applies to the following domain: www.tegernsee.com
Your current consent status: Allow all.
Your consent ID; QgkdrH1rRt+byAqUkaXQvFZATiFTeREU9Nyuk0YlS9z/lurULSVIMg==Consent date: Friday, 17 December 2021, 22:01:08 CET
Modify consent | Revoke consent
The cookie statement was last updated by Cookiebot on 2 September 2022:
Essential cookies help enable the use of websites by providing for basic functions like page navigation and access to secure website areas. Without these cookies, our website cannot function properly.
|__cf_bm||fast.fonts.com||This cookie is used to differentiate between people and bots. It thus helps us generate accurate reports on how our website is used.||1 day||HTTP cookie|
|browser_version_alert||Outdooractive||This cookie is used to determine the type of browser each visitor is using. If a visitor is using a browser that does not support all of our website's functions, a corresponding warning will be displayed.||1 day||HTTP cookie|
|citrix_ns_id||ERGO||This cookie is used in connection with synchronising our website with the data management platform of a third-party provider. It aids in monitoring this process for security purposes.||Session||HTTP cookie|
|CookieConsent||Cookiebot||This cookie stores the user's consent status regarding cookies in the domain in question.||1 year||HTTP cookie|
|li_gc||This cookie stores the user's consent status regarding cookies in the domain in question.||179 days||HTTP cookie|
|OptanonConsent||ERGO||This cookie indicates whether the visitor has acknowledged the cookie consent field. This ensures that the cookie consent field will not be displayed again when the visitor returns to the site.||1 year||HTTP cookie|
|rc::a||This cookie is used to differentiate between people and bots. It thus helps us generate accurate reports on how our website is used.||Persistent||HTML Local Storage|
|rc::b||This cookie is used to differentiate between people and bots.||Session||HTML Local Storage|
|rc::c||This cookie is used to differentiate between people and bots.||Session||HTML Local Storage|
Preference cookies enable a website to recall information that influences the way in which it behaves or appears (the user's region or preferred language, for example).
|lang [x2]||This cookie stores information on the user's preferred website language.||Session||HTTP cookie|
|spark_loader_url||BR||This cookie is required by BR's embedded media player.||Persistent||HTML Local Storage|
Statistics cookies help website operators understand how visitors interact with their sites by collecting and reporting anonymous information.
|This cookie registers a unique ID that is then used to generate statistical data on how a visitor uses our website.||2 years||HTTP cookie|
|_ga_#||This cookie collects data on how often a user has visited our website, as well as on their first and most recent visits. It is used by Google Analytics.||2 years||HTTP cookie|
|This cookie is used by Google Analytics to limit the request rate.||1 day||HTTP cookie|
|This cookie registers a unique ID that is then used to generate statistical data on how a visitor uses our website.||1 day||HTTP cookie|
|AnalyticsSyncHistory||This cookie is used in connection with synchronising data with the analytics service of a third-party provider.||29 days||HTTP cookie|
|atid||AT Internet||This cookie registers statistical data on the behaviour of visitors to our website. It is used by webmasters for internal analysis.||1 year||HTTP cookie|
|atidx||AT Internet||This cookie registers statistical data on the behaviour of visitors to our website. It is used by webmasters for internal analysis.||13 months||HTTP cookie|
|hit.xiti||AT Internet||This cookie is used to track the frequency and duration of website visits. It is also used to determine which and how many pages visitors access within our website. This information can be used to optimise the domain and the pages it contains.||Session||Pixel Tracker|
|i00||Infonline||This cookie collects data on a user's visits to our website, including on their number of visits, the average duration of their visits, and the pages they have visited, in order to generate reports that facilitate the optimisation of website content.||311 days||HTTP cookie|
|idrxvr||AT Internet||This cookie collects data on a user's visits to our website, including on the pages they have accessed.||13 months||HTTP cookie|
|referrer_url||tegernsee.traumgutscheine.com||This cookie determines how the user arrived on our website by registering the URL of the site they visited last.||Session||HTTP cookie|
|XTCsid||traumgutscheine.com||This cookie is used to determine whether a user has visited our website before.||Session||HTTP cookie|
Marketing cookies are used to track visitors on websites. The aim is to display advertisements that are relevant and appealing to each individual, and thus generate more value for the respective publishers and third-party advertisers.
|_glogb_lastu||Outdooractive||This cookie is used to target ads based on behaviour profiling and the user's geographic location.||Session||HTML Local Storage|
|_GRECAPTCHA||This cookie is used to differentiate between people and bots. It thus helps us generate accurate reports on how our website is used.||179 days||HTTP cookie|
|_uetsid||Yumpu||This cookie is used to track visitors across multiple websites in order to display relevant advertising based on their preferences.||Persistent||HTML Local Storage|
|_uetsid_exp||Yumpu||This cookie contains the expiration date of the respective cookie along with its name.||Persistent||HTML Local Storage|
|_uetvid||Yumpu||This cookie is used to track visitors across multiple websites in order to display relevant advertising based on their preferences.||Persistent||HTML Local Storage|
|_uetvid_exp||Yumpu||This cookie contains the expiration date of the respective cookie along with its name.||Persistent||HTML Local Storage|
|ads/ga-audiences||This cookie is used by Google AdWords to re-engage visitors that are likely to turn into customers based on their online behaviour across multiple websites.||Session||Pixel Tracker|
|AVP_UUID||Yumpu||This cookie collects data on how visitors behave and interact with our website. It is used to optimise the website and display more relevant ads on it.||Persistent||HTML Local Storage|
|AVPUID||AdvertServe||This cookie is used to identify users across multiple visits and devices. This enables the website to show visitors ads that are relevant to them. The service is provided by ads from third parties that enable advertisers to present offers in real time.||1 year||HTTP cookie|
|bcookie||This cookie is used by the social networking service LinkedIn to track the use of embedded services.||1 year||HTTP cookie|
|bscookie||This cookie is used by the social network LinkedIn to track the use of embedded services.||1 year||HTTP cookie|
|cgi-bin/gn||secure-eu.nmrodam.com||This cookie registers user data such as IP addresses, geographic locations, visited websites, and the ads users have clicked in order to optimise the display of ads based on how users navigate websites that belong to the same ad network.||Session||Pixel Tracker|
|lidc||This cookie is used by the social network LinkedIn to track the use of embedded services.||1 day||HTTP cookie|
|MUID||Microsoft||This cookie is largely used by Microsoft as a unique user ID. The synchronisation of this ID across Microsoft's many domains makes it possible to track the respective user.||1 year||HTTP cookie|
|pagead/1p-user-list/#||This cookie is used to track whether the visitor has expressed interest in certain products or events on multiple websites and how the visitor navigates among these sites. This is used to measure advertising expenditure and facilitate the payment of referral fees among websites.||Session||Pixel Tracker|
|test_cookie||This cookie is used to check whether the user's browser supports cookies.||1 day||HTTP cookie|
|tr||Meta Platforms, Inc.||Facebook uses this cookie to display a series of ad products, including real-time offers from third-party advertisers.||Session||Pixel Tracker|
|UserMatchHistory||This cookie is used to track visitors across multiple websites in order to display relevant advertising based on their preferences.||29 days||HTTP cookie|
|VISITOR_INFO1_LIVE||YouTube||This cookie attempts to estimate the range of users on sites with integrated YouTube videos.||179 days||HTTP cookie|
|YSC||YouTube||This cookie registers a unique ID to retain statistics on YouTube videos the user has viewed.||Session||HTTP cookie|
Unclassified cookies are those that we are currently working to classify along with the providers of the individual cookies.
|audiodescriptionPreferred||BR||Pending||Persistent||HTML Local Storage|
|deviceId||BR||Pending||10 years||HTTP cookie|
|hola_random_mode||BR||Pending||Persistent||HTML Local Storage|
|spark_config_url||BR||Pending||Persistent||HTML Local Storage|
|spark_web||BR||Pending||Persistent||HTML Local Storage|
|thumb_533adc9d-7933-4d59-90a3-0d767d3e8a54||tegernsee.traumgutscheine.com||Pending||Persistent||HTML Local Storage|
|ttt_iframe||tegernsee.traumgutscheine.com||Pending||1 day||HTTP cookie|
End of data privacy statement | Last update: March 2019