HeineMack® GmbH appreciates your visit to our website and your interest in our company.

The topic of data protection has the highest priority at HeineMack® GmbH. We would therefore like to inform you in detail below:

• What information HeineMack® GmbH collects during your visit to our website
• The purposes for which this information is processed
• The legal basis for the processing of personal data
• The recipients to whom personal data is transmitted
• How long personal data is stored
• Whether you are obliged to provide us with personal data

We would also like to inform you,

• What rights you have in relation to the data processing carried out
• Who is to be regarded as the controller within the meaning of data protection law and, if available, the contact details of our data protection officer

1. What information does HeineMack® GmbH collect during your visit to this website?

(1) When you visit our website for information purposes (i.e. not by registering or contacting us), the following information is automatically transmitted from your browser to our server:

• IP address of your computer
• Information about your browser
• Name of the website from which you are visiting us
• Name of the accessed offer page (URL) or the accessed file
• Date and time of your visit
• Transferred data volumes
• Status information such as error messages

(2) If you contact us via a contact form on our website or by e-mail, we receive the following information:

Your email address and other information that you send to us in your email or via fields on a contact form

Date and time you contacted us

2. To what extent does HeineMack® GmbH process the aforementioned data and for what purposes?

(1) When you visit the website, we use the IP address and the other data automatically transmitted by your browser to our server under section 1 (1) in order to

a) provide you with the requested content. We only store the full IP address for as long as this is technically necessary to display the requested page to you.

b) to transmit your IP address to a service provider who compares your public IP address with non-personal company information. This company information is stored by us. In this processing step, your IP address is neither stored by our service provider nor by us.

c) to protect us from attacks and to ensure the proper operation of our website. We store the data in question temporarily and access-protected for a maximum of 180 days. Data on access that is required for the further tracking of attacks and malfunctions is excluded from deletion after a maximum of 180 days.

HeineMack® GmbH will only attempt to find out which person is behind an IP address in cases of unlawful attacks.

(2) We store the IP address of your computer after we have shortened it by the last octet – i.e. in anonymised form – in order to analyse the usage behaviour of visitors to our website and thus improve our website. The abbreviation of the IP address for this purpose takes place immediately after collection. We therefore do not collect any personal information about your usage behaviour on our website.

(3) If you contact us via a contact form on our website or by email, we will use the personal data mentioned in section 1 (2) to answer your enquiry and to comply with it as far as possible. This personal data will be stored for as long as is necessary to answer and fulfil your enquiry.

3. Are you obliged to provide us with this data? Can you object to the use?

When you visit our website, the information mentioned in section 1 (1) is automatically transmitted from your browser to our server. The transmission of this information is voluntary. Without the provision of this personal data, we will not be able to show you the requested page.

You are not obliged to allow us to use your already anonymised data for web analysis. You are also not obliged to allow us to match your IP address with your company data.

If you wish to contact us and send us an e-mail or use our contact form to do so, the transmission of information in accordance with section 1 (2) is voluntary. If a contact form contains mandatory fields, these are labelled. Without the provision of the personal data required in individual cases, we may not be able to answer your enquiry in the best possible way.

4. What is the legal basis for processing your personal data?

The legal basis for the processing of your personal data described in section 2 is Article 6(1), sentence 1, point (f) of the General Data Protection Regulation. The legitimate interest of HeineMack® GmbH in these processing activities arises from the purposes stated in section 2.

5. To whom do we pass on your personal data?

We pass on the personal data referred to in section 1 to processors based within the European Union for the purposes set out in section 2. The processing there is carried out on our behalf and in accordance with our instructions. We have no intention of transferring your personal data to a third country.

6. How do we secure your personal data?

HeineMack® GmbH uses technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously revised in line with technological developments.

7. Are cookies used on our website?

When you visit our website, we use cookies, which cookies we use and how you can prevent our cookies from being set, we would like to inform you below.

The following cookies are important for the smooth functioning and for certain services of our website:

You can configure your browser settings according to your wishes and thus decide which cookies you want to allow and which cookies you want to reject. We would like to point out that you may not be able to use all the functions of our website if you do not allow the use of cookies under section 7.1.

8. What rights are you entitled to?

You have certain rights under the General Data Protection Regulation:

Right of access: the right of access to your personal data processed by us and to certain other information (such as that provided in this Privacy Policy);

Right to rectification: If your personal data is incorrect or incomplete, you have the right to rectification;

Right to erasure: On the basis of the so-called ‘right to be forgotten’, you can request the erasure of your personal data, unless there is a retention obligation. The right to erasure is not an absolute right. For example, we have the right to continue processing your personal data if such processing is necessary to comply with our legal obligations or for the establishment, exercise or defence of legal claims;

Right to restriction of processing: This right includes the restriction of the use or the manner of use. This right is limited to certain cases and exists in particular if: (a) the data is inaccurate; (b) the processing is unlawful and you oppose the erasure; (c) we no longer need the data, but you require the data for the establishment, exercise or defence of legal claims. If processing is restricted, we may continue to store the data, but not use it. We keep a list of those persons who have exercised the right to restrict processing in order to be able to ensure this restriction;

Right to data portability: This right means that we transfer your personal data in a structured, commonly used and machine-readable format for your own purposes, where technically feasible;

Right to object: You can object to the processing of your personal data if it is processed on the basis of legitimate interests, in particular in the case of direct marketing;

Right to be informed: You have the right to be informed in clear and plain language about how we process your personal data; and

Right to withdraw your consent: If you have given us your consent to processing, you have the right to withdraw your consent at any time. Such a revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Exercising these rights is free of charge for you. However, you must prove your identity with two factors. We will use reasonable endeavours in accordance with our legal obligations to transfer, rectify or erase your personal data in our file systems.

To exercise your rights, lodge a complaint or submit other requests, please contact us by email or write to us. We will endeavour to respond to you within 30 days. The contact details can be found in section 10.

If we receive a complaint, we will contact the person who made the complaint to investigate the complaint. If we are unable to resolve a complaint immediately, we will co-operate with the authorities, in particular the data protection authorities, as required.

If you are not satisfied with the handling of a complaint regarding your personal data, you can address your complaint to the competent data protection authority.

9. Where you can complain?

You have the right to lodge a complaint with the contact details provided in this privacy policy or with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. You can also contact:

10. Who is responsible for data processing and who can provide me with further information?

HeineMack® GmbH

Am Steinacher Kreuz 28

D-90427 Nürnberg

Tel. +49 (0) 911/32 37 93-0

E-Mail: datenschutz@rollercoasterrestaurant.com

11. Data protection for minors

This website is aimed at people who are at least 18 years old. We do not wish to collect personal data from persons under the age of 18.

Persons under the age of 18 should therefore not submit any personal data on or via this website. If such a person submits personal data via this website, we will delete this data and not process it any further as soon as we become aware that they are underage