Information about handling your data as a participant in competitions/ raffles. (German version is binding!)

1. Name and address of the person responsible for the processing/controller
Südsee-Camp Gottfried and Per Thiele OHG
Südsee-Camp 1
29649 Wietzendorf

Commercial Register of the Lüneburg District Court
HRA 100926
VAT ID number DE 116379529

2. Contact person
Tabea Miersch
Marketing Südsee-Camp
Südsee-Camp 1
29649 Wietzendorf

3. Data protection officer
As external data protection officer is commissioned:
Mr Stefan Kleinermann
From the company Kleinermann & Sohn GmbH
Max-Planck-Str. 9
52499 Baesweiler

4. Responsible supervisory authority for control and compliance with data protection law
The Niedersachsen State Commissioner for Data Protection
Prinzenstraße 5 30159
Hannover

5. Scope of data processing
When participating in the competition, we will initially process the following data:
· Name and contact details (title, first name/surname, address, email address and, if necessary, phone number)

6. Purpose of data processing
Personal data is processed to run our competitions.
We collect and process your personal data, especially for the following purposes:
· Determining a winner
· Selecting and verifying a winner
· Statistical evaluations or market analysis
· Quality control as well as assessment and optimisation of needs analysis procedures and communication with you
· Meeting of legal obligations or regulatory requirements

According to the respective competition rules, the name and place of residence of the winner will be published in advertising media of Südsee-Camp Gottfried & Per Thiele OHG.

7. Offers, news and promotions
If you have given us your consent, you will regularly receive interesting offers by email or post. Your address information or email address will not be shared with other companies. You may revoke your consent to use your email address for advertising purposes at any time with effect for the future by clicking on the "Unsubscribe" link at the end of the newsletter. Your consent to use your address information for advertising purposes by post can be revoked at any time with effect for the future by simply informing us by fax, by post or by email to svenja.thiele-naujok(at)suedsee-camp.de.

Your consent to process the data is obtained during the registration process and reference is made to this privacy policy. The legal basis for the processing of the data is the consent of the user as per Art. 6 Para. 1 lit. a GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. Your address information or email address will therefore be stored as long as the subscription is active to receive offers, news and promotions.

8. Legal regulations on data protection
Personal data is processed exclusively for the purpose of running the competition. Data is processed exclusively for the purpose of running the competition. The legal basis for data processing to fulfil this contractual obligation is Art. 6 Para. 1 lit. a) GDPR (declaration of consent).

9. Data subject rights
As a data subject, your rights under the GDPR (hereinafter also referred to as "data subject rights") include the following:

Right of access to information (Article 15 GDPR)

You have the right to request information about whether we process personal information about you or not.

The first copy is free of charge, a reasonable fee may be charged for additional copies. A copy can only be provided if the rights of other persons are not affected.

Right to rectification of data (Article 16 GDPR)

You have the right to ask us to correct your data if it is incorrect and/or incomplete. This right also includes the right to completion through supplementary statements or notifications.

Right to erasure of personal data (Article 17 GDPR) You have the right to demand deletion of your personal data from us in the following cases:

· The personal data is no longer required for the purposes for which they were collected and processed.

· The data has been processed on the basis of your consent and you have revoked your consent; however, this does not apply if there is another legal permission for data processing.

· You have objected to data processing whose legal permission lies in the so-called "legitimate interest" (according to Article 6 Para. 1 lit. f)); however, deletion does not have to take place if there are overriding legitimate reasons for further processing.

· You have objected to data processing for direct marketing purposes.

· Your personal data has been processed unlawfully.

· It is data of a child collected for information society services (= electronic service) on the basis of the consent (in accordance with Article 8 Paragraph 1 GDPR).

A right to delete personal data does not exist in the following cases:

· The right to freedom of expression and information conflicts with the request for deletion.

· The processing of personal data

- to meet a legal obligation (for example, statutory record retention requirements),

- to carry out public duties and interests under applicable law (including "public health") or

- required for archiving and/or research purposes.

· The personal data is required to assert, exercise or defend legal claims.

Right to restriction of data processing (Article 18 GDPR)

You have the right to restrict the processing of your personal data in the following cases:

· If you have disputed the accuracy of your personal information, you can demand that we do not use your data for the duration of the verification of accuracy and so restrict its processing.

· If data is processed unlawfully, you may request the restriction of data usage instead of data deletion.

· If you need your personal data to assert, exercise or defend legal claims, but we no longer need your personal information, you may demand that we restrict the processing to legal prosecution purposes.

· If you have objected to a data processing (pursuant to Article 21 Paragraph 1 GDPR) and it is not yet clear whether our interests in processing the data outweigh your interests, you can demand that your data is not used for other purposes for the duration of the investigation, thus restricting its processing.

Personal data whose processing has been restricted at your request, may only be processed subject to storage in the following cases:

· With your consent.

· To assert, exercise or defend legal claims.

· To protect the rights of other natural or legal persons.

· For reasons of important public interest.

If a restriction on processing is lifted, you will be notified in advance.

Right to data portability (according to Article 20 GDPR)

You have the right to demand receipt of the data that you have provided us in a common electronic format (e.g. as a PDF or Excel document).

You may also demand that we transmit this information directly to another company (specified through you), if technically feasible for us.

The prerequisite for having this right is the following:

· We will process the data on the basis of consent given or for the implementation of a contract and is carried out with the help of automated procedures.

· Exercising the right to data portability shall not affect the rights and freedoms of others. If you exercise your right to data portability, you continue to have the right to data erasure as per Article 17 GDPR.

Right to object to specific data processing (Article 21 GDPR)

You have the right to object to the processing of your data if your data is processed for the purpose of performing public interest tasks or legitimate interests. To do this, you must provide us with an explanation of the reasons for your objection arising from your particular situation. This can be special family circumstances or legitimate secrecy interests, for example.

In case of an objection, we shall refrain from any further processing of your data for the purposes stated under point 5, unless

· There are compelling legitimate grounds for processing the data that outweigh your interests, rights and freedoms, or

· The processing of the data is necessary for the assertion, exercise or defence of legal claims.

· You can object to the use of your data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is connected with direct marketing. If you object, we may no longer use your data for direct marketing purposes.

Exercising of data subject rights

Please contact the authority mentioned in point 1 above to exercise data subject rights. Requests that are submitted electronically are usually answered electronically. The information, notifications and measures to be provided under the GDPR, including "the exercise of data subject rights", are generally provided free of charge. Only in the case of manifestly unfounded or excessive claims are we entitled to charge an appropriate fee for the processing or to refrain from taking action (according to Article 12 Paragraph 5 GDPR).

If there are reasonable doubts about your identity, we may request additional information from you for identification purposes. If we cannot identify you, we are entitled to refuse to process your request. We will, if possible, notify you separately if identification is not possible (see Article 12 Paragraph 6 and Article 11 GDPR).

Requests for information are usually processed immediately, but in any case within one month of receipt of the request. The deadline may be extended for a further two months, to the extent necessary to take the complexity and/or number of requests into account. In the event of an extension, we will inform you of the reasons for the delay within one month of receipt of your request. If we fail to act upon a request, we will notify you of the reasons for doing so within one month of receipt of the request, and inform you of the possibility to lodge a complaint with a regulatory authority or to seek judicial remedy (refer to Article 12 Paragraph 3 and 4 GDPR).

Please note that you can exercise your data subject rights only within the limits and restrictions provided by the Union or the member states (Article 23 GDPR).

10. Recipients or categories of recipients of the data
As part of the processing, your data may be transmitted to:

· Persons and departments within our company who are involved in the fulfilment of our contractual and legal obligations or in the processing and implementation of our legitimate interest in data processing, to fulfil our contractual and legal obligations or in the processing and implementation of our legitimate interests.

· Service providers who are bound by contract and obliged to maintain secrecy and perform data-processing tasks in connection with the execution of the contract.

· External companies, where necessary. Examples include postal service providers for the delivery of letters and/or logistics/shipping companies in connection with the execution of the contract.

· Authorities, if we are obliged to provide information, notification or disclosure of data in order to meet legal requirements or if data transfer is in the public interest.

11. Data transmission to third countries
Data transmission to third countries are not planned and are currently not taking place.

12. Duration of data storage / standard periods for the deletion of the data
We process and store your data for the duration of the competition or the duration of our business relationship. Your data processed as part of the competition will be deleted within 30 days after the end of the competition, unless otherwise specified as part of the specific competition entry conditions.

In addition, we are subject to various retention and documentation requirements, which are defined by the German Commercial Code (HGB) and the Fiscal Code of Germany (AO). The periods for retention and documentation specified in the above codes are up to ten years beyond the end of the business relationship or the pre-contractual legal relationship.

Special legal regulations may also require a longer retention period, such as the preservation of evidence in accordance with the statutory limitation provisions, for example.