Kontakt Icon

Privacy policy

Personal rights are important. Therefore, on this page you can find the explanation of a data protection guideline that regulates how data is collected, used, disclosed, passed on and stored when using our website. Data protection is a serious issue and personal data should therefore be treated confidentially and in accordance with legal regulations. Since changes to this data protection declaration can be made due to new technologies and the constant further development of the website, it is advisable to read the data protection declaration again at regular intervals. The definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.

The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Fritz Geers, Altenauer Straße 35, 38678 Clausthal-Zellerfeld, Germany, contact email: info[a]fritzgeers.de. The person responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

Type of data processed

  • Inventory data (e.g. customer master data, such as names, addresses)
  • Contact details (e.g. email, telephone numbers)
  • Content data (e.g. text input, photographs, videos)
  • Contract data (e.g. subject of the contract, term, customer category)
  • Payment data (e.g. bank details, payment history)
  • Usage data (e.g. websites visited, interest in content, access times)
  • Meta / communication data (e.g. device information, IP addresses)

Purpose of processing

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website, as well as answering contact inquiries and communication with users, as a security measure and for range measurement or for marketing. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

Relevant legal bases

In accordance with Art. 13 GDPR, the legal basis for the data processing of this website is communicated. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of services and the implementation of contractual measures as well as answering inquiries is Art. 6 Paragraph 1 lit. b GDPR, the legal basis for processing to fulfill legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing to safeguard legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that vital interests of a data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR as the legal basis.

Safety measures

In accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons, suitable technical and organizational measures are taken to ensure a level of protection appropriate to the risk.

The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, forwarding, ensuring availability and their separation. In addition, a procedure has been set up that guarantees the exercise of data subject rights, deletion of data and a response to data threats. In addition, the protection of personal data was already taken into account in the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and made through data protection-friendly default settings (Art. 25 GDPR).

Cooperation with processors and third parties

If data is disclosed to other persons and companies (contract processors or third parties) in the course of processing, if it is transmitted to them or otherwise granted access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties as required by payment service providers in accordance with Art. 6 Para. 1 lit. b GDPR to fulfill a contract), a legal obligation provides for this or based on legitimate interests (e.g. when using agents, web hosts, etc.). If third parties are commissioned to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If data is processed in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of the use of third-party services or disclosure or transmission of data to third parties, this only takes place if it happens to fulfill the (pre) contractual obligations, on the basis of consent, on the basis of a legal obligation or on the basis of a legitimate interest. Subject to legal or contractual permissions, the data will only be processed in a third country if the special requirements of Art. 44 ff. GDPR are met. I.e. processing takes place e.g. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

Data Subject Rights

Users have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR. Users have accordingly. Art. 16 GDPR you have the right to request the completion of the relevant data or the correction of incorrect data relating to you. In accordance with Art. 17 GDPR, users have the right to demand that the relevant data be deleted immediately or, alternatively, in accordance with Art. 18 GDPR, they can request that the processing of the data be restricted. Users have the right to receive the data they have provided in accordance with Art. 20 GDPR and to request that they be transmitted to other responsible parties.

Withdrawal and Right to object

Users have the right to withdraw their consent in accordance with. To revoke Art. 7 Para. 3 GDPR with effect for the future. Users can object to the future processing of their data at any time in accordance with Art. 21 GDPR. The objection can in particular be made against processing for direct marketing purposes.

Cookies

Some of the websites offered use so-called cookies. Cookies do not cause any damage to the user's computer and do not contain viruses. Cookies serve to make the offer more user-friendly, more effective and safer. Cookies are small text files that are stored on the user's computer and stored in their browser. Most of the cookies used on this website are so-called “session cookies”. They are automatically deleted at the end of your website visit. Other cookies remain stored on the user's device until they are deleted. These cookies enable the website operator to recognize the browser the next time you visit. For users, it is possible to set the browser so that information is provided about the setting of cookies and cookies are only allowed in individual cases, the acceptance of cookies can be excluded for certain cases or in general, and the automatic deletion of cookies when closing the browser is activated becomes. If cookies are deactivated, the functionality of this website may be restricted. Cookies that are required to carry out the electronic communication process or to provide certain functions desired by users are stored on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. As far as other cookies (e.g. cookies for the analysis of the surfing behavior of the users) are stored, these are treated separately in this data protection declaration. The cookie settings can be edited here: Edit settings

Server log files

Websites are hosted by a provider, i.e. the files required to display the website are stored on the provider's servers. The provider collects data on access to the website on the basis of a legitimate interest (see Art. 6 Paragraph 1 lit. f. GDPR) and saves them as "server log files" on the website server. The following data is logged in this way:

  • Website visited (name and URL)
  • Time at the time of access
  • Amount of data sent in bytes
  • Source / reference from which you came to the page (referrer URL)
  • Browser used
  • Operating system used
  • Used IP address
  • Name of the access provider

The log files are anonymized immediately when they are collected by the provider. The data is collected for the proper performance of the contract (ensuring a problem-free page structure, comfortable use of the website, for purposes of system security and stability as well as for administrative purposes) and for security reasons, e.g. B. to clarify cases of abuse. If data have to be kept for reasons of evidence, they are excluded from deletion until the incident has been finally resolved. Otherwise the data will be retained for 21 days and then deleted. The basis for data processing is Art. 6 Para. 1 lit. f GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.

Contact forms

If users make inquiries using the contact form, their details from the inquiry form, including the contact details they provided there, are stored for the purpose of processing the inquiry and in the event of follow-up questions. The processing of the data entered in the contact form is therefore exclusively based on the consent of the user (Art. 6 Para. 1 lit. a GDPR). Users have the option of revoking this consent at any time. An informal message by email is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation. The data entered by users in the contact form remain until the website operator is requested to delete them, users revoke their consent to storage or the purpose for data storage no longer applies (e.g. after a request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Guestbook

As part of the comment function in the guest book on this website, in addition to your comment, information about the time the comment was created and the name of the commentator you have chosen will be saved and published on the website. Your email address and your IP address will also be logged and saved. The email address and IP address are saved for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by submitting a comment. In addition, the storage of your IP address serves to protect against machine comments. By submitting this, you agree to this. We also need your e-mail address in order to contact you if a third party should object to your published content as unlawful. By submitting an entry, you expressly agree that the entry with your name, date and time will be publicly readable on the corresponding page of this website. If you want to delete or correct a contribution, please contact the email address given in the legal notice. The legal basis for the storage of your data is Article 6 Paragraph 1 lit.b and f GDPR. We reserve the right to delete comments if third parties complain that they are illegal.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on the user's computer and that enable your use of the website to be analyzed. The information generated by the cookie about the use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

The IP anonymization function is activated on this website. As a result, the IP address of the user will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the website operator, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by the user's browser as part of Google Analytics will not be merged with other Google data.

Users can prevent the storage of cookies by making the appropriate setting in their browser software. It should be noted, however, that in this case not all functions of this website can be used to their full extent. Users can also prevent Google from collecting the data generated by the cookie and relating to the use of the website (including the IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de (external link).

More information on how to handle user data on Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de (external Link). A data processing contract has been concluded with Google by the website operator. The strict requirements of the German data protection authorities when using Google Analytics are fully implemented.

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. These data cannot be assigned to a specific person. Users can deactivate this function at any time via the ad settings in their Google account or generally prohibit the collection of their data by Google Analytics.

Google Analytics Remarketing

This website uses the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted depending on the previous usage and surfing behavior of the users on one device (e.g. mobile phone) can also be displayed on another device (e.g. tablet or PC). If users have given their consent, Google links web and app browser history to the user's Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on the user to log in with a Google account. To support this function, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to Google Analytics data from the website operator, in order to define and create target groups for cross-device advertising. Users can permanently object to cross-device remarketing / targeting by deactivating personalized advertising in their Google account under the following link: https://www.google.com/settings/ads/onweb/ (external Link). The aggregation of the collected data in the Google account of the users takes place exclusively on the basis of their consent, which they can give to Google or revoke (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in the user's Google account (e.g. because they do not have a Google account or have objected to the merging), the collection of data is based on Art. 6 Para. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of the website visitors for advertising purposes. Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/ (external link).

Google Ads and Google Conversion-Tracking

This website uses Google Ads. Ads is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”). So-called conversion tracking is used as part of Google Ads. When users click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and the website operator can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. The customers find out the total number of users who clicked on the ad and were forwarded to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If users do not want to participate in tracking, this use can be contradicted by deactivating the Google conversion tracking cookie in the Internet browser under user settings. Users will then not be included in the conversion tracking statistics. The storage of “conversion cookies” is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Users can find more information about Google Ads and Google Conversion Tracking in the Google Privacy Policy: https://www.google.de/policies/privacy/ (external link). Users can set their browser so that they are informed about the setting of cookies and cookies are only allowed in individual cases, the acceptance of cookies is excluded for certain cases or in general, and the automatic deletion of cookies is activated when the browser is closed. If you deactivate cookies, the functionality of this website may be restricted.

Facebook Pixel

This website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversion. In this way, the behavior of the site visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized. The data collected is anonymous for the website operator and no conclusions can be drawn about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage guidelines. This enables Facebook to switch advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by the website operator. The privacy policy of Facebook contains information on protecting the privacy of users: https://www.facebook.com/about/privacy/ (external link). You can also deactivate the “Custom Audiences” remarketing function in the advertising settings area under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (external link). To do this, the user must be logged in to Facebook. If users do not have a Facebook account, usage-based advertising from Facebook can be deactivated on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ (external link).

Newsletter and MTB-routes

If users would like to receive the newsletter offered on the website or the MTB routes offered, an e-mail address and information that allows verification that they are the owner of the e-mail address provided are required and that Declaration of consent obtained that you agree to receive a newsletter or MTB routes offered. Further data is not collected or is only collected on a voluntary basis. These data will only be used to send the requested information and will not be passed on to third parties. The processing of the data entered in the newsletter registration form takes place exclusively on the basis of the consent (Art. 6 Para. 1 lit. a GDPR) of the user. The consent given to the storage of the data, the e-mail address and its use for sending the newsletter can be revoked at any time, for example via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data stored by users for the purpose of subscribing to the newsletter are stored until they are unsubscribed from the newsletter and deleted after the newsletter has been canceled. This does not affect data that was saved for other purposes.

The website operator uses GetResponse to send newsletters. The provider is GetResponse Sp.z o.o., ul.ARKONSKA 6 / A3, 80-387 GEDANSK, Poland. GetResponse is a service with which, among other things, the dispatch of newsletters can be organized and analyzed. The data entered by users for the purpose of subscribing to the newsletter is stored on GetResponse's servers. If the website operator sends newsletters with the help of GetResponse, it can be determined whether a newsletter message has been opened and which links have been clicked. GetResponse also enables the newsletter recipients to be divided into different categories (so-called tagging). The newsletter recipients can e.g. break down by gender, personal preferences or customer relationship. In this way, the newsletters can be better adapted to the respective target groups. More information on this at https://www.GetResponse.de (external link). If users do not agree to the analysis by GetResponse, they must unsubscribe from the newsletter. A corresponding link is provided for this in every newsletter message. The data processing takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). Users can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation. The data stored by users for the purpose of subscribing to the newsletter at the website operator is stored until you unsubscribe from the newsletter and deleted from the GetResponse servers after you unsubscribe from the newsletter. This does not affect data that has been saved for other purposes. You can find more information in the GetResponse data protection provisions at: https://www.getresponse.de/email-marketing/legal/datenschutz.html (external link). The website operator has concluded an order data processing contract with GetResponse in which GetResponse undertakes to protect customer data and not to pass it on to third parties.

Online presence in social media

The website operator maintains an online presence within social networks and platforms in order to communicate with customers, interested parties and users active there and to inform them about services. It should be noted that user data can be processed outside of the European Union. This can result in risks for the user, because e.g. the enforcement of user rights could be made more difficult. With regard to US providers who are certified under the Privacy Shield, it is pointed out that they undertake to comply with the data protection standards of the EU. Furthermore, user data is usually processed for market research and advertising purposes. E.g. User profiles are created from the usage behavior and the resulting interests of the users. The usage profiles can in turn be used to e.g. To place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the usage behavior and the interests of the user are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of the personal data of the users is based on the legitimate interests of the website operator in an effective information of the users and communication with the users acc. Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers of the platforms for consent to the data processing described above, the legal basis for processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR. For a detailed description of the respective processing and the possibilities of objection (opt-out), reference is made to the information provided by the provider linked below. In the case of requests for information and the assertion of user rights, it is pointed out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. Should users still need help, they can contact the website operator.

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland), Facebook pages based on an agreement on joint processing of personal data - privacy policy: https://www.facebook.com/about/privacy/ (external link), Opt-Out: https://www.facebook.com/settings?tab=ads (external link) and http://www.youronlinechoices.com (external link), Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active (external link).

Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Datenschutzerklärung: https://policies.google.com/privacy (external link), Opt-Out: https://adssettings.google.com/authenticated (external link), Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active (external link).

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Data protection decleration/ Opt-Out: http://instagram.com/about/legal/privacy/ (external link).

Youtube

Videos from the “YouTube” platform operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, are integrated into the website. Data protection: https://www.google.com/policies/privacy/ (external link), Opt-Out: https://adssettings.google.com/authenticated (external link). When a page is called that has an embedded video or a "Subscribe" button, a connection to the YouTube servers is established and the content is displayed on the website via an embedded iFrame window. In doing so, data is transmitted to the YouTube server, in particular which website was visited and which video was viewed. Users logged in to YouTube at the same time are assigned this information in the YouTube member account. This can be prevented by logging out of the member account before visiting the website. YouTube is used in the interest of an appealing presentation of the online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

Agreement when requesting mountainbike tours as a GPS file via email

The route files for mountainbike tours offered on this website (hereinafter referred to as content) were created with the greatest possible care and the best of our knowledge. However, the provider of this website assumes no responsibility for the topicality, completeness and correctness of the content provided. The files offered for mountainbike tours are not advice or a substitute for guided mountainbike tours of the provider, but only route suggestions. You use the content at your own risk. The provider excludes any claims, damages or other liability arising from the use of the content. Due to the constant changes in the route status, route changes and the conditions in the overall structure of the route network, we cannot constantly check every single content for accuracy. The software used is also in a test phase and we assume no liability for damage that may be caused by the use of our files and services. Users release the provider from all claims that third parties may assert against the provider due to incorrect use of the information. Users also guarantee not to ride on areas that are not allowed to be entered. The provider reserves the right to change the content if necessary. In addition, the provider reserves the right to delete content if it is not in the interest of the provider. It is forbidden to combine copies of the offered file with other files, to publish, distribute and / or sell them. Permission is only given to use a copy of this file for navigation on a corresponding GPS-enabled device for private use only.

Status and update

This data protection declaration was last updated on 13. january 2021. We update the data protection declaration from time to time. Please inform yourself about the current status of this data protection declaration.