Privacy Policy

2. Scope: website and central booking system

This privacy policy applies to the website www.parken-in-baabe.de.

It describes separately which personal data is processed when you visit this website and which data is processed when a parking space is booked in the central booking system.

3. Hosting and technical provision of the website

The domain www.parken-in-baabe.de is managed via the service ALL-INKL.COM – Neue Medien Münnich and forwarded to this website. ALL-INKL states Germany as the server location; according to the provider, the data hosted there is stored on company-owned servers in Germany.

The Base44 platform is used for the technical provision and delivery of this website. Where this service acts as a processor, processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The data of this website is processed and stored within the region selected for this purpose in accordance with the technical configuration. For individual technical, administrative or supporting functions, processing may take place elsewhere. Where data is transferred to third countries, this is done in compliance with Art. 44 et seq. GDPR.

Images and fonts of this website are delivered via the platform's technical infrastructure. In the process, your IP address is transmitted to the delivering server. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and stable operation of the website.

4. Central booking application

Parking bookings do not take place on this website. They are made via the central booking system at https://parken.baltic-city-spaces.com/kalender?site=baabe.

The booking calendar of this booking system is embedded in this website. When it is displayed, your browser loads the calendar directly from the booking system's server; in the process, your IP address is transmitted to that server. The legal basis is Art. 6(1)(b) or (f) GDPR.

The call from the Baabe website is made with the location parameter site=baabe so that the booking system assigns the call to the Baabe location.

Within the booking system, the privacy notices provided there also apply.

The booking system is operated on the operator's own technical infrastructure. Where service providers are used as processors, processing is carried out on the basis of data processing agreements pursuant to Art. 28 GDPR.

5. Data processing during booking

When booking in the central booking system, the following personal data in particular may be processed:

• first name
• last name
• email address
• phone number, if provided
• postal address, if required
• vehicle registration number
• vehicle type
• booking period
• booking number
• booked location
• booking status
• payment status
• selected additional services
• time of booking
• accepted version of the GTC
• time of acceptance of the GTC

The legal basis for carrying out and processing the booking is Art. 6(1)(b) GDPR (performance of a contract).

Where statutory retention obligations exist, processing is based on Art. 6(1)(c) GDPR.

No booking data such as name, address, vehicle registration number or payment data is collected or stored on this website itself.

6. Server log files of this website

When this website is accessed, the server automatically collects information and stores it in server log files.

The following in particular is collected:

• page accessed
• date and time of access
• IP address
• browser type and browser version
• operating system
• referrer URL

Processing is based on Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and stable operation of the website.

7. Contacting us

If you contact us via the contact form, email or telephone, we process the information you provide exclusively to handle your enquiry.

The contact form on this website transmits your details in encrypted form to this website's server and from there by email to us. The following is transmitted: first name, last name, mobile number, email address and your message. The details are not stored permanently on this website but remain in our email inbox.

To protect against automated enquiries, we check a simple arithmetic task, an additional field invisible to visitors and the time taken to complete the form. No external captcha service is used.

Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The data is deleted once the enquiry has been conclusively processed and no statutory retention obligations prevent this.

8. Cookies, local storage and consent

Technically necessary storage is used on the basis of Art. 6(1)(f) GDPR or Section 25(2) TDDDG. This includes storing your cookie choice in your browser's local storage so that it can be taken into account on further visits.

Non-essential analytics and marketing technologies are loaded exclusively after your express consent. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You can withdraw or adjust your consent at any time with effect for the future. You can reach the settings via the "Cookie settings" link in the footer of this website.

9. External content: map and weather display

A map from OpenStreetMap is embedded on the home page of this website. The provider is the OpenStreetMap Foundation.

The map is only loaded after your consent. Without consent, only a notice is displayed with the option to load the map or to open the location directly in an external map service.

When the map is loaded, your IP address is transmitted to OpenStreetMap. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

The links to Apple Maps and Google Maps only transmit data to the respective map service when you actively click them.

After your consent, the current weather in Baabe is displayed in the header of this website. To do this, your browser retrieves the weather data directly from the service Open-Meteo (api.open-meteo.com); in the process, your IP address is transmitted to Open-Meteo. Without consent, no weather is displayed and no connection to Open-Meteo is established. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

10. Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is loaded exclusively after your consent. Before your consent, no analytics data is collected and no connection to Google servers is established.

The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

In the process, data, in particular your IP address and information about your use of this website, may be transmitted to Google. Further information can be found in Google's privacy policy.

Measurement ID of this website: G-H1WY162WKX.

11. Locally hosted fonts

The fonts used on this website are loaded locally from this website's server.

No connection to Google Fonts servers is established.

12. Payment services

Payment of the booking price is made exclusively in the central booking system and not on this website.

The booking system offers the payment methods PayPal, Google Pay, Apple Pay, Visa, Mastercard and American Express. Processing is carried out via the payment service providers integrated there.

When a payment is made, the data required for processing, in particular name, payment amount, booking number and the payment data, is transmitted to the respective payment service provider. The legal basis is Art. 6(1)(b) GDPR.

The payment service providers' own privacy notices apply to their processing.

Which payment service providers are used in the booking system in an individual case is determined by the respective booking process; this cannot be confirmed from this website.

13. No further services

No further analytics, marketing or tracking services are used on this website.

In particular, no newsletter, no captcha service, no social media plugins and no external advertising networks are used.

14. Storage period

Personal data is stored only for as long as is necessary to fulfil the respective purposes or due to statutory retention obligations.

15. Your rights

You have the following rights towards us regarding the personal data concerning you:

• information about the processed data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)

To exercise your rights, a message to the contact details given above is sufficient.

16. Withdrawal of consent given

You can withdraw any consent given at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

The competent authority is in particular the supervisory authority of your habitual residence, your place of work or the place of the suspected infringement.

18. Changes to this privacy policy

We reserve the right to adapt this privacy policy where this becomes necessary due to changed legal situations or technical changes.