Data protection

Contact of the controller

The controller responsible for processing your personal data is

VP France SAS, 34, Av. des Champs-Elysées, F-75008 Paris.

General information

The following information explains what data we collect and what we use it for. It also explains how and for what purpose this is done. Your data is personal if you are personally identified or identifiable.

Purposes of processing and their legal basis

1. operation of the website

Data is collected automatically or with your consent when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). Technical data is collected automatically as soon as you access this website. IP addresses are processed insofar as this is necessary for the purpose of operating the website, including ensuring technical security. Legal basis: Art. 6 para. 1 lit. f

1.1 Hosting

We host the content of our website with the following provider: WIX .The provider is Wix.com Ltd, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter "WIX"). WIX is a tool for creating and hosting websites. When you visit our website, WIX is used to analyse user behaviour, visitor sources, the region of website visitors and visitor numbers. WIX stores cookies on your browser that are required to display the website and to ensure security (necessary cookies). The data collected by WIX may be stored on various servers worldwide. The WIX servers are located in the USA, among other places. For details, please refer to the WIX privacy policy: https://de.wix.com/about/privacy. According to WIX, data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Art. 46 GDPR. You can find details here: https://de.wix.com/about/privacy-dpa-users

The use of WIX is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified in accordance with the DPF undertakes to comply with these data protection standards.

2. contact form

On the one hand, by providing an e-mail address, we fulfil the legal requirement for the possibility of rapid electronic contact. On the other hand, we need your name, address etc. in order to be able to process your enquiry and, in the event of a booking, to comply with our statutory reporting obligations. Your data will then be processed for this purpose and your data will be deleted if it is no longer required for this purpose and there is no other obligation to archive it. Legal basis: Art. 6 para. 1 sentence 1 lit. b, c

3. google calendar (availability)

Under the menu item "Availability", we publicly integrate a Google service, our "Google Calendar". When you use this service, a connection to Google's servers is established. Among other things, Google is informed which pages you visit. The service provider of Google Calendar in this case is Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland. It cannot be ruled out that personal data may also be transferred to the parent company, Google LLC, based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and thus to a third country. In this case, the data transfer to the USA takes place on the basis of an adequacy decision, because the USA is then certified as having a comparable level of data protection as within the scope of the GDPR. However, a further prerequisite is that the company in question is certified in accordance with the EU-U.S. Data Privacy Framework. Google LLC is certified accordingly, see https://www.dataprivacyframework.gov/list

4. recipients of personal data

Your data will not be transferred to third parties for purposes other than those listed below. We only pass on your data to third parties if you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a, if the transfer is necessary in accordance with Art. 6 para. 1 sentence 1 lit. f and if there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that the transfer is necessary in accordance with Art. 6 para. 1 lit. b for the processing of contractual relationships with you.

5. storage period

Your data will be processed for the stated purpose and your data will be deleted when it is no longer required for this purpose and there is no other obligation to archive it. As a rule, personal data is stored for ten years; in individual cases, a shorter or longer storage period may be required.

6 What rights do you have as a data subject?

If we process your personal data, you have various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21:

- The right to information: you can request information in accordance with Art. 15 about your personal data processed by us.

- The right to rectification: If the information concerning you is not or no longer accurate, you can request rectification in accordance with Art. 16. If your data is incomplete, you can request that it be completed.

- The right to erasure: You can request the erasure of your personal data in accordance with Art. 17. If there are legal rights or obligations to continue storing the data, the data will be blocked.

- The right to restriction of processing: In accordance with the provisions of Art. 18, you have the right to request that the processing of data concerning you be restricted, provided that the conditions for this are met.

- The right to object: In accordance with Art. 21, you have the right to object to the processing of data concerning you.

7 Competent supervisory authority

CNIL - Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy

TSA 80715

75334 PARIS CEDEX 07

France

Telephone: +33 (0)1 53 73 22 22

You have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR,

if you are of the opinion that the processing of your personal data by us

a violation of data protection regulations and that your rights have been violated.

Further information

1. cookies

Our Internet pages use so-called "cookies". Cookies are data records. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services). Cookies have various functions.

Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies can be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

2. encryption

This site uses encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Cancellation policy

Right of cancellation

You have the right to cancel this contract within fourteen days without giving any reason.

The cancellation period is fourteen days from the date of conclusion of the contract.

To exercise your right of cancellation, you must contact us ( VP France SAS, 34, Av. Des Champs-Elysées, France, 75008 Paris; postal address: VP France SAS, cancellation, 34, Av. Des Champs-Elysées, France, 75008 Paris; phone: +49 (0) 172 862 8537; e-mail: info@villa-helikon.com) of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or e-mail). You can use the attached sample cancellation form, but this is not mandatory.

To meet the cancellation deadline, it is sufficient for you to send your notification of exercising your right of cancellation before the cancellation period has expired.