Data protection

This data protection declaration (version: GDPR 1.0 from May 15, 2018) was created by:Deutsche Datenschutzkanzlei Data Protection Office Munich - www.deutsche-datenschutzkanzlei.de

Data protectionWe, Waldsee Golf Management GmbH, are responsible for this online offer and, as a provider of a teleservice, will inform you at the beginning of your visit to our online offer about the type, scope and purposes of the collection and use of personal data in a precise, transparent, understandable and easily accessible form to teach in clear and simple language. The content of the information must be available to you at any time. We are therefore obliged to inform you which personal data is collected or used. Personal data refers to all information that relates to an identified or identifiable natural person. We attach great importance to the security of your data and compliance with data protection regulations. The collection, processing and use of personal data is subject to the provisions of the currently applicable European and national laws. We would like to use the following data protection declaration to show you how we handle your personal data and how you can contact us: Waldsee Golf Management GmbH Hopfenweiler 988339 Bad WaldseeGermanyEmail: info@waldsee-golf.deWeb: www.waldsee-golf.deTelephone: 49 7524 4017-0Commercial register number: HRB 600367Managing director: Sascha M. BinothOur data protection officerIf you have any questions, you can reach our data protection officer as follows:Christine SontheimerWaldsee Golf Management GmbHE-Mail: christine.sontheimer@waldsee-golf.de

A. General

For better comprehensibility, there is no gender-specific differentiation in our data protection declaration. In the spirit of equal treatment, corresponding terms apply to both genders. What terms are used, such as: B. What means “personal data” or its “processing” can be found in Article 4 of the EU General Data Protection Regulation (GDPR). The users’ personal data processed as part of this online offer includes inventory data (e.g. names and addresses of customers). , contract data (e.g. services used, names of clerks, payment information), usage data (e.g. websites of our online offering visited, interest in our products) and content data (e.g. entries in the contact form). “User” includes all categories of persons affected by data processing. This includes, for example, our business partners, customers, interested parties and other visitors to our online offering.

B. Specific

Data protection declarationWe guarantee that we only collect, process, store and use your data in connection with the processing of your inquiries and for internal purposes as well as to provide services or content you have requested. Basics of data processing We only process users' personal data under Compliance with relevant data protection regulations. User data will only be processed if the following legal permissions exist:

in order to provide our contractual services (e.g. processing orders) as well as online services, the processing is required by law if you have given your consent due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offering within the meaning of Art. 6 Paragraph 1 lit. f. GDPR, in particular when measuring reach, creating profiles for advertising and marketing purposes as well as collecting access data and using third-party services)

We would like to show you where the above legal bases are regulated in the GDPR:

Consent Article 6 Paragraph 1 Letter a. and Art. 7 GDPRProcessing to fulfill our services and implement contractual measures Art. 6 Para. 1 lit. b. GDPR processing to fulfill our legal obligations Art. 6 Para. 1 lit. c. GDPR processing to protect our legitimate interests Art. 6 Para. 1 lit. f. GDPR

Data transfer to third parties Data will only be passed on to third parties within the framework of the legal requirements. We only pass on user data to third parties if, for example, B. is necessary for contractual purposes or based on legitimate interests in the economic and effective operation of our business. If we use subcontractors to provide our services, we take appropriate legal precautions as well as appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations. Data transfer to a third country or an international organization A third country is understood to be countries in which the GDPR is not directly applicable law. In principle, this includes all countries outside the EU or the European Economic Area. There will be no data transfer to a third country or an international organization without your consent or without a legal basis.

Storage period of your personal data We adhere to the principles of data economy and data avoidance. This means that we only store the data you provide to us for as long as necessary to fulfill the aforementioned purposes or as specified by the various storage periods provided by law. If the respective purpose no longer applies or after the relevant deadlines have expired, your data will be routinely blocked or deleted in accordance with legal regulations. We have created an internal company concept to ensure this procedure. Contact Us Contact us by email or via the contact form , you agree to electronic communication. When you contact us, personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. Your data will be transmitted using SSL encryption. The information you provide will be stored exclusively for the purpose of processing the request and for possible follow-up questions. We would like to provide you with the legal basis for this:

Processing to fulfill our services and carry out contractual measures Art. 6 Para. 1 lit. b. GDPR processing to protect our legitimate interests Art. 6 Para. 1 lit. f. GDPR

We use software to maintain customer data (CRM system) or comparable software based on our legitimate interests (efficient and quick processing of user inquiries). We operate the system in-house. This means that no data will be passed on to third parties.

We would like to point out that emails can be read or changed during transmission without authorization and without being noticed. We would also like to point out that we use software to filter unwanted emails (spam filter). The spam filter can be used to reject emails if they have been incorrectly identified as spam due to certain characteristics.

What rights do you have?

a) Right to informationYou have the right to obtain free information about your stored data. Upon request, we will inform you in writing in accordance with applicable law which personal data we have stored about you. This also includes the origin and recipients of your data as well as the purpose of data processing.b) Right to correctionYou have the right to have the data we have stored corrected if it is incorrect. You can restrict processing, e.g. B. if you dispute the accuracy of your personal data.c) Right to blockingYou can also have your data blocked. In order for your data to be blocked at any time, this data must be kept in a blocking file for control purposes.d) Right to deletionYou can also request the deletion of your personal data, provided there are no legal retention requirements. If such an obligation exists, we will block your data upon request. If the relevant legal requirements are met, we will delete your personal data even without a corresponding request from you.e) Right to data portabilityYou are entitled to request that we provide the personal data transmitted to us in a format that allows transmission to another Position permitted.f) Right to complain to a supervisory authorityYou have the option of contacting one of the data protection supervisory authorities with a complaint.The State Commissioner for Data Protection and Freedom of Information Baden-WürttembergPostal address: PO Box 10 29 32, D-70025 StuttgartHome address: Königstraße 10a, D -70173 StuttgartTelephone 49 711 615541–0Telefax: 49 711 615541–15Email: poststelle@lfdi.bwl.deWeb: https://www.baden-wuerttemberg.datenschutz.deYou can open the complaint form via the following link:https ://www.baden-wuerttemberg.datenschutz.de/online-beschwerdeg) Right to objectYou have the option to revoke the use of your data for internal purposes at any time with effect for the future. All you need to do is send an email to info@waldsee-golf.de. However, such a revocation does not affect the lawfulness of the processing operations carried out by us up to that point. This does not affect data processing with regard to all other legal bases, such as contract initiation (see above). Protection of your personal data We take contractual, organizational and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are adhered to and in order to in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. The security measures include, in particular, the encrypted transmission of data between your browser and our server. A 256-bit SSL (AES 256) encryption technology is used for this purpose. This includes your IP address. Your personal data is protected in the following ways (excerpt):

a) Maintaining the confidentiality of your personal dataIn order to maintain the confidentiality of your personal data stored by us, we have taken various access, entry and access control measures.b) Maintaining the integrity of your personal dataTo ensure the integrity of your personal data stored by us To ensure the availability of your personal data stored by us, we have taken various measures to control orders and availability. The security measures in use are implemented accordingly continuously improved due to technological developments. Despite these precautions, due to the insecure nature of the Internet, we cannot guarantee the security of your data transmission to our online offering. Because of this, any data transmission from you to our online offering is at your own risk. Protection of minors Persons who have not yet reached the age of 16 may only provide personal information to us if they have the express consent of their legal guardians. This data will be processed in accordance with this data protection declaration.

CookiesWe use cookies. Cookies are small text files that are stored locally in the cache of your internet browser. Cookies enable recognition of the Internet browser. The files are used to help the browser to navigate through the online offering and to be able to fully use all functions. Our online offering uses: Browser cookiesControl of cookies by the userBrowser cookies: You can set all browsers so that cookies are only accepted upon request . You can also set the settings to only accept cookies whose pages are currently being visited. All browsers offer functions that enable the selective deletion of cookies. The acceptance of cookies can also be generally switched off, although restrictions on the user-friendliness of this online offer must then be accepted.

Lifespan of the cookies usedCookies are managed by the web server of our online offering. This online offer uses: Transient cookies/session cookies (single use process) Lifespan: Until this online offer is closed

Deactivate or remove cookies (opt-out) Every web browser offers options for restricting and deleting cookies. For more information, please visit the following websites:- Internet Explorer: http://windows.microsoft.com/en-GB/windows7/How-to-manage-cookies-in-Internet-Explorer-9- Firefox: https:/ /support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies - Google Chrome: https://support.google.com/chrome/ answer/95647?hl=en- Safari: https://support.apple.com/de-de/HT201265

Use of Google MapsWe use Google Maps to display maps and create directions. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this online offer, you agree to the collection, processing and use of the automatically collected data and the data you enter (including the IP address) by Google, one of its representatives or third-party providers. The terms of use for Google Maps can be found at the following link: https://www.google.de/intl/de/policies/terms/regional.html Detailed details on transparency and choices as well as the data protection regulations can be found in the Google data protection center. de: https://www.google.de/intl/de/policies/privacy/?fg=1

Social media presenceWe make offers (e.g. fan pages) available online on various social media platforms, which provide information about Waldsee Golf Management GmbH and give us the opportunity to get in touch with you. We would like to point out that we have no influence on the processing of your personal data on these platforms and only the respective operator of the platform has full knowledge of the content of the transmitted data and its use.

As a rule, cookies are stored in your browser when you visit the respective platform.

You may be affected by this data collection even if you are not registered on the respective platform. We do not know whether the data ends up outside the European Economic Area.

Our processing of personal data on the platforms is based on Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest is to be able to present Waldsee Golf Management GmbH to the outside world in a variety of ways and to use the opportunity to communicate with our customers as effectively as possible.

Consent to data processing in accordance with Article 6 Paragraph 1 Letter a) GDPR can also be the legal basis if you have given this to the platform operator.

You will receive detailed information about the data processing of the platform operators, the respective objection options, the right to information as well as specific information about the respective platforms via the following data protection notices of the respective operators:

Facebook Provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, IrelandData protection declaration: https://www.facebook.com/about/privacy/Cookie information: https://www.facebook.com/policies /cookies/

Specific information about Facebook fan pages: When you visit our Facebook fan page, Facebook processes your personal data (Facebook Insights). This data is transmitted to us anonymously by Facebook as part of Facebook Insights. This anonymized data is statistical data about our fan page subscribers.

In addition, we receive your profile data from Facebook if you interact with us or our site, for example, like or comment on posts or write to us via Facebook or follow our site.

YouTube provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, IrelandData protection declaration: https://policies.google.com/privacy Cookie information: https://policies.google.com/technologies/ads?hl=deOpt- Out: https://adssettings.google.com/anonymous?hl=de&sig=ACi0TCiJxXvvKBloi2agYqXUJ4wynvlJklYAPsz_wOZwSUspvMZl4kBzJhFORHem0ERdQR1S2YqYpM9z1j8524iEylUKxtZ5IQ

Specific information about YouTube accounts or channels: When you visit our YouTube website, YouTube processes your personal data. This data is transmitted to us anonymously by YouTube as part of the YouTube STUDIO use. This anonymized data is statistical data about our channel subscribers.

In addition, we receive the username of your “Google ” profile from YouTube when you interact with us or our site, for example when you like or comment on videos or subscribe to our channel.

YouTube plugin Our website contains videos from the YouTube platform, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google).

We use these services on the basis of Article 6 Paragraph 1 Letter f) GDPR, as we have a legitimate interest in disseminating and increasing the level of awareness of our online presence. If you are logged into your YouTube account and play the video, you enable YouTube to assign your surfing behavior directly to your personal profile. This assignment takes place regardless of whether you click on the video or not. You can prevent this association with your YouTube account by logging out of your YouTube account.

Further information on how user data is handled can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Changes to our data protection regulationsWe reserve the right to occasionally adapt our data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration. This could, for example, concern the introduction of new services. The new data protection declaration will then apply to your next visit. Trademark protection Every company or trademark mentioned here is the property of the respective company. The mention of brands and names is for purely informational purposes.A. Russia-specific provisions The following applies to users who are resident in the Russian Federation: The above services of our online offering are not intended for citizens of the Russian Federation who have their place of residence in Russia. If you are a Russian citizen resident in Russia, you will You are hereby expressly informed that any personal data you provide to us via this online offering is solely at your own risk and responsibility. You further agree that you will not hold us responsible for any failure to comply with any laws of the Russian Federation.