Data protection information

1. Controller

We, Albatros Versicherungsdienste GmbH, Venloer Str. 151-153, 50672 Köln, and Albatros Financial Solutions GmbH, Venloer Str. 151-153, 50672 Köln (hereinafter also jointly referred to as "Albatros", "we", "us"), as a company of the Delvag Group, take the protection of your private data seriously and we want you to feel comfortable when visiting our website. The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes.

We process personal data collected when you visit our website in accordance with the legal provisions. Our data protection policy is also based on the data protection guidelines applicable to the Lufthansa Group.

In the following, we inform you about the processing of your personal data in the context of the use of our website www.albatros.de.

If you have any further questions regarding data protection in connection with our website or the services offered on it, please contact our data protection officer:

Lufthansa Group Privacy-Representative
Deutsche Lufthansa AG
Abt. FRA CJ/D
Lufthansa Aviation Center
Gebäude 366
Airportring
60546 Frankfurt/Main

For data protection questions, you can also send an e-mail to:
datenschutz@dlh.de

2. Scope, purpose and legal basis of the processing of personal data

In the following situations, we collect and use personal data directly from our users or from other sources (as shown below):

2.1. Provision of the website and log file creation

By visiting our website the system automatically collects data and information about the user’s computer system each time our website is accessed. The following data ("technical information") are collected:

Information about the browser type and version used
The user’s operating system
The user's Internet service provider
The user’s IP address
Date and time of access
Websites from which the user's system accesses our website
Websites accessed by the user's system via our website

This data is also stored in the log files of our system. This data are not stored together with other personal data of the user.

We collect and use this technical information for the purposes of (network) security (to for example ward off cyber-attacks), marketing and to better understand our users’ needs as well as to continuously improve our website and enable users to access the website from their computers.

The data are saved to log files to ensure website functionality. The data also help us improve the website and safeguard our information technology systems. The data are not analysed for marketing purposes in this context.
Art. 6 (1) (f) GDPR forms the legal basis for the temporary storage of the data and log files.

2.2 Use of cookies

In order to make our offer as user-friendly as possible, we use so-called cookies.

The "cookie" is a small text file that a web server (e.g. the web server of www.albatros.de) sends to your browser when you visit a website. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when you return to the website.

The so-called "session cookies" expire at the end of the browser session and can record your actions during this one browser session. In contrast, "persistent cookies" remain stored on your terminal device even between different browser sessions and can record your settings or actions on several websites. No personal data is stored in the cookies we use.

Depending on the settings of your browser, the cookie file is saved or rejected. If the file is saved, our web server can recognize your terminal device. On subsequent visits and when switching between functions that require you to enter a password, the cookie can save you some input. In this way, cookies make it easier for you to use websites that require user input. In addition, cookies can help us to offer you a browsing experience that is as tailored to you as possible.

Unless you explicitly do not want this and deactivate the cookies as described below: You can either set your browser to receive our cookies or use our website without cookie functionality. In the latter case, however, your text entries in form fields cannot be saved for further queries, so that renewed entries are required the next time you visit our website. Furthermore, in this case, we are unfortunately unable to present you with content tailored to your personal needs.

It is also possible that your browser is already set to display a warning message each time it receives a cookie. Since the identification cookie has to be resent every time you call up each individual page of our website, this message can be very annoying. We therefore recommend that you set your browser to always allow cookies from www.albatros.de. You can set this setting for individual web pages.

For more information on the use of cookies and how to disable cookies, please visit www.meine-cookies.org or www.youronlinechoices.com.

Regardless of stored cookies, for security reasons you must log in again each time you access areas on our website that require registration. Albatros also integrates third party content on www.albatros.de. These third parties may set cookies while you are visiting www.albatros.de and thereby receive, for example, the information that you have accessed www.albatros.de. Please visit the websites of these third-party providers for more information about their use of cookies. If you have chosen not to give or revoke your consent to the use of cookies requiring consent in principle (deactivation of cookies), only those functionalities of our website will be made available to you whose use we can guarantee without these cookies.

Web beacons are small graphic files (also referred to as "pixel tags" or "clear GIFs") that may be included in our websites, apps, applications and newsletters and are usually used in conjunction with cookies to identify users or user behavior. The above statements on cookies apply accordingly to web beacons; web beacons are not used in particular if you have objected to the use of the corresponding cookie.

Cookies generally do not pose a risk to your computer, as they are only text files and not executable programs.

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

Click here to make your personal settings.

2.3. Consent management service

The legal basis for the use of the Consent Management Service of Usercentrics GmbH is the fulfilment of legal obligations in accordance with Art. 6 (1) (c) GDPR.

2.4 Web Analysis

Some of the data collected when visiting this website is used for statistical analysis. Delvag analyzes the visits to its website with the aim of understanding the needs of its customers and, based on this, to continuously improve the online platform. For this purpose, we store by default the IP address of your Internet service provider, the website from which you visit us, the web pages you visit on our website, your browser type, your operating system and the date and duration of your visit. The IP address is not associated with a specific person. Only anonymous, aggregated data is evaluated for statistical purposes as part of the web analysis. For the analysis we use Google Analytics, as well as the software Matomo version 3.14.1.

If you do not agree with a completely anonymized storage and evaluation of the data measured by Google Analytics and Matomo, you can object to the storage and use at any time. In this case, a so-called opt-out cookie is stored in your browser, which means that Google Analytics and Matomo no longer collect session data.

2.4.1 Google Analytics

On this website we use the web analysis service Google Analytics, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The use includes the mode "Universal Analytics". This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices. The purpose of the Google Analytics component is to analyze how visitors use our website. Google provides us with reports for this purpose, which we can use to display and evaluate the activities on our website. Google Analytics uses so-called "cookies", text files that are stored on your terminal device with which you visit our website.

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. For your protection, we use the function whereby the IP address of your internet connection is automatically shortened by Google if access to our website is from a member state of the European Union or from another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

If you have consented to this in accordance with Art. 6, (1) a) GDPR, Google will use the data collected to evaluate your use of the website, to compile reports on website activities and to provide other services associated with website and internet use.

Sessions and campaigns are terminated after a certain period of time. By default, sessions are terminated after 30 minutes of no activity and campaigns are terminated after six months. The time limit for campaigns can be a maximum of two years.

You can actively activate (opt-in) - or deactivate again - the storage of cookies by setting your browser software accordingly; however, we would like to point out that in the event of deactivation, you may not be able to use all the functions of this website to their full extent.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/en/policies/privacy/ and at http://www.google.com/analytics/terms/de.html.
Google Analytics is explained in more detail under this link: https://www.google.com/intl/de_de/analytics/

2.4.2 Matomo (formerly Piwik)

In addition to Google Analytics, we use the web analytics service "Matomo" (formerly "PIWIK") on our websites.

Matomo is an open source software that is used for website optimization. This software runs exclusively on our own servers.

Personal user data is only stored there. The data is not passed on to third parties.

2.5. Social Media Plugins

Plugins from social media are used on our pages, currently:

Facebook
Xing
LinkedIn

You can usually recognize the plugins by the respective social media logos. We use the so-called "two-click solution" on our website.

With the "two-click solution", your data is only transmitted to the respective social media network company after an initial activation (consent) of the respective plug-in button, Art. 6 (1) lit. a GDPR.

The basic provision of the plug-ins on our website results from our legitimate interest for marketing purposes, Art. 6 para. 1 lit. f GDPR.

Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland is responsible for the German website facebook.de. The plug-ins are usually marked with a Facebook logo.

In addition to Facebook, we use plug-ins from Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) and LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA).

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their privacy notices:

a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php
further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.

b) XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
For details on their handling of your personal data, please refer to XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

2.6. Online-Werbung

2.6.1. Google Ads Conversion (formerly Google Adwords)

We use the Google Ads Conversion offer to draw attention to our products and offers on external websites with the help of advertising media (so-called Google Ads). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

If you access our website via a Google ad, Google Ads will store a cookie on your terminal device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer (in this case us, Albatros) and the cookie stored on their computer has not yet expired, Google and the customer/Albatros can recognize that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

2.6.2. Google Adwords Remarketing

In addition, we use Google AdWords Remarketing, an offer from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Insofar as you have actively given us your consent to this in accordance with Art. 6 (1) p. 1 lit. a GDPR, a so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising via a pseudonymous CookieID and the websites you visit.

We can use this to create lists of users who have visited a particular site or searched for a particular product. These cookies can also be combined with location information or interest segments provided by Google. These lists allow us to retarget you with relevant, personalized advertising elsewhere on the Internet. No personally identifiable information is collected in this process and we cannot identify you or your device.

After the end of the purpose and the end of the use of Google AdWords Remarketing by us, the data collected in this context will be deleted.

Furthermore, data processing only takes place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.

You can find more details in Google's privacy policy. However, if you do not wish to use Google's remarketing function, you can deactivate it in principle by making the appropriate settings at http://www.google.com/settings/ads. Further information on Google Remarketing and Google's privacy policy can be found at: http://www.google.com/privacy/ads/.

2.6.3. Facebook-Pixel

This website uses the so-called "Facebook Pixel" and "Facebook Custom Audiences" of the social network "Facebook" of Facebook Inc. ("Facebook") for the following purposes:

With the help of the Facebook Pixel, we want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel, we can track the effectiveness of the Facebook Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").

Due to the marketing tool used (Facebook Pixel), your browser automatically establishes a direct connection with the Facebook server as soon as you have actively agreed to the use of cookies requiring consent. Through the integration of the Facebook Pixel, Facebook receives the information that you have accessed our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account.

2.6.4. Facebook Custom Audiences

We use Facebook Custom Audiences (a service of Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland, a subsidiary of Facebook, Inc., 601 Willow Road, Menlo Park CA, USA) for remarketing purposes in order to display relevant advertisements to Internet users, create specific target groups or exclude existing Albatros customers from our advertising.

This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the social network "Facebook" or other websites that also use this method. We pursue the interest to show you advertisements that are of interest to you in order to make our website or offers more interesting for you.

For this reason, we transmit your hashed (pseudonymized) e-mail address to Facebook. The so-called "hashing" is a form of pseudonymization in which an e-mail address is encrypted in such a way that persons can no longer be identified on the basis of this hashed e-mail address without using additional information. Facebook then matches this email address with potential Facebook addresses/accounts. The hashed email addresses are deleted by Facebook within 6-8 hours after the matching is complete.

Facebook does not share this data with third parties or other advertisers and does not grant

no access to this data. The legal basis for the processing of this data is your active consent pursuant to Art. 6 (1) lit. a GDPR.

The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Specific information and details about the Facebook Pixel u and how it works can also be found in the help area of Facebook.

The processing that takes place after collection and transmission is the sole responsibility of Facebook.

The creation of reports and analyses in aggregated and anonymized form takes place as part of commissioned processing and is therefore our responsibility.

For joint responsibility, we have concluded a corresponding agreement with Facebook, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to joint responsibility.

The contact details of the responsible party, as well as Facebook's data protection officer, can be accessed here: https://www.facebook.com/about/privacy

Further information on how Facebook processes personal data, including its legal basis and information on data subject rights is located here: https://www.facebook.com/about/privacy. We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f GDPR.

Information on data security conditions can be found here. https://www.facebook.com/legal/terms/data_security_terms and on processing based on standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Deactivation of the "Facebook Custom Audiences" function is possible here and for logged-in users at https://www.facebook.com/settings/?tab=ads#.

Lifetime of cookies: up to 180 days after the last interaction (this only applies to cookies set via this website).

Legal basis: Art. 6 (1) a GDPR.

2.7. Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

2.8. Use of the services offered on our website

On our website, we offer a variety of different services. In order to provide these, we need to collect and process personal data of the user or our customer.

2.8.1. Contact form

By filling out the contact form on our website, you provide us with your personal data. This information includes, for example, name, contact details such as email address, telephone number and your personal preferences. We use this personal data to process your requests and/or to provide the requested services or information. Data processing for the purpose of contacting us is based on your voluntarily given consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.

2.8.2 Newsletter

On our website, you have the option to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask will be transmitted to us and processed: E-mail address as well as last name.

In addition, the following data is collected during registration:

(1) IP address of the calling computer
(2) Date and time of registration

No data is passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

We process your data in connection with the newsletter in order to send you messages that inform you about interesting topics from the Albatros world. In addition, we also process and use the e-mail address entered to send you personalized offers in connection with the newsletter.

Should a link from the newsletter lead you to our websites, you also give us permission to process and use your IP address, as well as geo-data, web beacons or similar technologies to check whether the offers made to you have met your requirements.

Unsubscribing is possible at any time, for example via a link at the end of each newsletter.

The legal basis for the processing of the data after registration to the newsletter by the user is, if the user has given his consent, Art. 6 (1) lit. a GDPR.

2.8.3. Real estate contact form

You have the option on our website to fill out a real estate contact form. By doing so, you provide us with your personal data. This data includes, for example, name, contact details such as e-mail address, telephone number and your personal wishes. We forward this data to the company Immowings Berlin GmbH, Fredericiastr. 7, 14050 Berlin for the purpose of contacting you as requested. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a GDPR.

2.8.4. Video consultation and text chat

You have the option to communicate with our consultants via video consultation and/or text chat. You can find further technical information on online counseling at the following link: https://beratung.albatros.de/info/privacy-policy

In principle, it is possible to use video counseling and text chat without having to provide any personal information. It is also possible to use a pseudonym (any chat name). We use the data collected by us in the context of an inquiry submitted by you exclusively for the purpose of processing your inquiry. We store and use your feedback on the video consultation and/or text chat only in anonymized form. When using video consulting via our website, the following information is stored in a log file: Actions such as start and end, date and time of use, and a number assigned to the video consultation (session ID). This data is collected, processed and used for the technical administration and optimization of the websites and exclusively within the scope permitted by law. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR. We only store further data if we have your consent. In this case, the legal basis for processing is Art. 6 Abs. 1 lit. a GDPR.

Data security in video consulting and text chat
In video consulting and text chat, all data is transmitted in encrypted form. Our employees will never ask you to transmit confidential information via text chat; there is no provision for entering such data. For security reasons, do not enter any account or contract numbers or passwords in text chat. This applies in particular to PINs and TANs.

2.8.5. Changing personal data

You have the possibility to change your personal data on our website. The legal basis for the processing of the data after the change has been made is Art. 6 para. 1 lit. a GDPR.

2.8.6 Aviation Portal Corporate Clients

You have the option of using the AirlinePortal on our website. For this, it is necessary that you register as a person (and not your company). The identification is done by your name, your position within your company, your business email address or phone number. We need this information, for example, to verify your identity. In addition, we need the data to send important messages to you (e.g. change of terms of use). The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.

2.8.7. Use of Google Maps

On our website, we use Google Maps to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on how to manage your own data in connection with Google products can be found here.

2.8.8. Albatros Online Calculator

By filling in the fields of our Albatros Online Calculators, you provide us with your personal data. The data entered will be collected, processed and stored and used by us for the purpose of preparing the offer and for further processing and support. Under no circumstances will the data be passed on to uninvolved third parties, unless this is absolutely necessary for the processing of a contract that you have made with us or for the preparation of an offer, or unless we are legally obliged to do so. The legal basis for this processing of personal data is Art. 6 para. 1 lit. a and Art. 6 para. 1 lit. b GDPR. Further information can be found in our privacy policy.

2.8.9. Webinare

Provider: Webinargeek

Albatros Versicherungsdienste GmbH and Albatros Financial Solutions GmbH (Albatros) use the Webinargeek software of the provider WebinarGeek B.V. (contract processor) to conduct customer webinars.

During the registration process, personal data is collected and stored in the infrastructure of Webinargeek (Chroomstraat 12 in Zoetermeer, The Netherlands). This includes last name, first name, company name, phone number and email address. This is done on the basis of Art. 6 para. 1 lit. f of the GDPR (Basic Data Protection Regulation).

The processing of data by Webinargeek is based on Art. 28 of the GDPR. The data is processed within the framework of the law applicable in Germany, the law applicable in the European Union and the law applicable in the USA. For the processing of data in USA, an adequate level of protection, in accordance with the standard contractual clauses applicable in the EU, is ensured. In this context, we refer to the Webinargeek Privacy Policy: https://webinargeek.com/en/privacy/.

Deletion of personal data will be carried out in accordance with retention periods required by law.

The use of the participant's personal data other than for the purpose of the aforementioned order fulfillment, as well as the disclosure to third parties, is made by Albatros only if legally permissible or with the consent of the participant.

Google Analytics in webinars

Webinargeek uses Google Analytics, a web analytics service provided by Google Ireland Limited,(Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). This involves the use of "Universial Analystics" technology, which allows data on web sessions and interactions on multiple devices to be associated with an anonymized user ID. This enables an analysis of a user's activities across multiple devices.

Google Analytics uses so-called "cookies", which are stored on your computer and allow the analysis of the use of the website.

Information about the use of the website generated by the cookie is generally transmitted to a server operated by Google in the USA and processed and stored there. If the anonymization of IP addresses is activated by this website, the IP address will be processed and shortened by a service of Google, which is located in the European Union or in states that are part of the Agreement of the European Economic Area, before the transmission takes place. Only under exceptional circumstances will the complete IP address be transmitted to a Google server in the USA and shortened there.

The following settings, for data transfer of the Google Analytics account used by Webinargeek have been explicitly disabled:

Google products and services
Benchmarking
Technical support
Accounts specialists

The information collected by Google is anonymized as much as possible. The IP address of your browser transmitted in the context of Google Analytics will not be associated with any other Google data. Google will use your data collected on this site on behalf of the operator of this website to prepare reports about the activities on this website, this is to provide other services based on the use of this website and the Internet to the operator of this website. These purposes also constitute our legitimate interest in data processing. The legal basis for the use of Google Analytics is §15(3) Telemediengesetz(TMG) and Article 6(1), subparagraph 1(f) DSGVO. Sessions and campaigns are terminated in specified periods of time. This period is generally 30 minutes without activity for sessions and 6 months for campaigns.

The maximum duration of campaigns is two years. Further information on the terms of use and data protection conditions regarding Google can be found at:
http://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=en/

2.8.10. Chat widget and support center via bold360 by LogMeIn Inc.

For visitors to our website, we offer online advice via a chat widget and a support center.

We use features of the digital engagement provider LogMeIn for this purpose. The provider is LogMeIn, Inc. 333 Summer Street, Boston, MA 02210 USA. When requests are made to the widget and the support center, a connection is established to LogMeIn servers and your IP address is transmitted for this purpose.

The use of the chat widget and support centers is voluntary and possible without registration. Collected data is processed to optimize our service offering and for statistical purposes. You can cancel the online consultation at any time by closing the window. The connection is handled via an encrypted internet connection. Since it is possible to enter personal data, we ask you to check for yourself which data you wish to disclose to us. If, on the other hand, the consultation requires identification (e.g., clarification of concerns regarding your customer account), requested personal data will serve exclusively to legitimize you for the purpose of conducting the consultation and ensuring its quality.

Our chat widget as well as the support center uses cookies. This makes the execution of the session technically possible.

The legal basis is Art. 6 para. 1 lit. f) EU GDPR. Our interest in being able to help you quickly around your visit to our website as well as to be able to optimize our services and carry out quality checks is thereby to be regarded as legitimate in the sense of the aforementioned provision.

2.8.11. Employee information portal bAV, XEMPUS

Albatros Versicherungsdienste GmbH and Albatros Financial Solutions GmbH (Albatros) use the employee information portal of the provider XEMPUS to provide employees of supervised workforces with current information on the bAV offer of their employer - clearly and understandably. Taking into account the employer's allowance and personal contribution, employees can calculate their guaranteed and projected pension benefits themselves and arrange a consultation appointment with Albatros insurance and pension specialists.

Only IP addresses and cookies are stored in the employee information portal, but no personal data is processed or saved. In order to be able to present the pension situation in the best possible way, only non-personal information on the personal situation is required. The legal basis for this processing of personal data is Art. 6 para. 1 lit. a GDPR. For more information, please refer to the XEMPUS Privacy Policy.

2.8.12. Our legitimate interests in the processing of personal data

In the event that Art. 6 (1) lit. f GDPR is the legal basis for processing, our legitimate interests in addition to the purposes listed above are:

The protection of the company from material or immaterial damage.
The professionalization (of our products and services)
Cost optimization (control and minimization)

2.9. Other processing obligations

If we are legally obligated to do so, we process personal data in order to comply with retention obligations under commercial or tax law or to fulfill requirements under security law (e.g., § 7 LuftSiG). Further information on retention periods can be found under "Dauer der Datenverarbeitung".

2.10. Obligation to provide personal date

For legally required or contractual requirements, we have marked the respective input fields in the input masks on our website that are mandatory for you to fill in so that we can provide the contract or service you requested.

2.11. Statistical evaluations

It is not excluded that your data is evaluated for the purpose of evaluating the preferences of our members ("statistical evaluation") in a data warehouse for the purpose of interest-oriented marketing, individual addressing and continuous optimization of our business process. We undertake this processing to gain a better understanding of what our customers expect from us and to be able to provide them with personalized communications. In addition, these evaluations help us with fraud detection, auditing, and ensuring security, which is why we carry out this processing to protect our legitimate interests, Art. 6 para. 1 lit. f GDPR.

3. Duration of data processing

Your personal data will be deleted as soon as it is no longer required for the stated purposes. In this context, personal data may be retained for the period during which claims can be asserted against Albatros (statutory limitation period of three to thirty years). In addition, personal data will be stored to the extent and for as long as Albatros is legally obligated to do so. Corresponding obligations to provide proof and to store data arise, among other things, from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act. The storage periods are then up to ten years.

4. Data security

4.1. SSL - Secure Socket Layer Procedure

In order to ensure the most secure transmission of your data between your web browser and our Internet system, we use Secure Socket Layer (SSL) encryption technology. SSL enables encrypted communication or document transmission over the Internet between web browsers and web servers. The URL of a web page with SSL connection to your browser starts with https://.

If your current browser is not SSL-enabled, you can download the latest version of the two most popular web browsers.

4.2. Use of Google reCaptcha

To protect their orders via contact form, we use the service reCAPTCHA of the company Google Inc. (Google). The query is used to distinguish whether the input is made by a human or abusive by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. By using reCaptcha, you agree that the recognition you provide will be used for the digitization of old works. However, in the event that IP anonymization is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with any other data held by Google. The deviating data protection provisions of the Google company apply to this data. For more information on Google's privacy policy, please visit: https://policies.google.com/privacy?hl=en.

5. Right of objection according to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

6. Transfer of personal data to third parties

In order to provide you with our products and services, based on our contractual obligations or according to our legitimate interests, we may need to share your personal data with third parties within or outside the Delvag Group. These recipients can be categorized as follows:

Insurers licensed by the Federal Financial Supervisory Authority and maintaining a branch in the Federal Republic of Germany
Credit institutions licensed by the Federal Financial Supervisory Authority and maintaining a branch in the Federal Republic of Germany
Building and loan associations
Broker pools, service companies
sub-brokers, including cooperation brokers
Providers of units or shares in domestic open-ended investment funds, open-ended EU investment funds or foreign open-ended investment funds that may be distributed pursuant to the German Investment Code (Kapitalanlagegesetzbuch)
External order processors (service companies according to Art. 28 GDPR)
Providers of investment assets within the meaning of Section 1 (2) of the Investment Assets Act;
Data processing within the Delvag Group
government agencies and authorities

In the process, personal data may be transferred to third countries or international organizations. For your protection and the protection of your personal data, appropriate safeguards are provided for such data transfers in accordance with and in compliance with the legal requirements (in particular the application of EU standard contractual clauses) or there is an adequacy decision issued by the EU Commission (Art. 45 GDPR).

Information on EU standard contractual clauses can be found here. The EU Commission provides the relevant information on its adequacy decisions at the following link.

You can also request a copy of the security measures used at datenschutz@delvag.de.

In addition, we are required by law to provide personal data to German and international authorities. In this case, the legal basis for processing is Art. 6 (1) lit. c GDPR in conjunction with local and international regulations and agreements.

7. Rights of the data subject

For Albatros, it is an important concern to make our processing procedures fair and transparent. Therefore, it is important to us that data subjects can exercise the following rights in addition to the right to object if the respective legal requirements are met:

Right to information, Art. 15 GDPR
Right to rectification, Art. 16 GDPR
Right to erasure ("right to be forgotten"), Art. 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Art. 20 GDPR

To exercise your rights, you can contact us by email at datenschutz@delvag.de. In order to process your request, as well as for identification purposes, please note that we will process your personal data in accordance with Art. 6(1)(c) GDPR.

In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Albatros is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Kavalleriestr. 2-4
40213 Düsseldorf

Telefon: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de

8. Consent

If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time.

If you wish to exercise your right of revocation, simply send an e-mail to: datenschutz@delvag.de

Please note that the consent you revoke will only have effect for the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to further process your personal data on another legal basis - such as for the performance of a contract.

9. Disclaimer and limits of this data protection notice

This privacy policy only refers to the processing of data on the website www.albatros.de.

Other websites are not covered by this privacy statement and provide their own specific privacy statements.

10. Privacy policy

Enclosed you will find our current privacy policy.

11. Topicality

This privacy notice is current and effective of January 2022.