coduco GmbH PRIVACY POLICY

In this privacy policy we set out our practices with respect to data collected from users who access our website at nussanger.de ("Website") or otherwise provide us with personal data (collectively: "Users").Responsible authority within the meaning of the General Data Protection Regulation (GDPR): Bavarian State Office for Data Protection Supervision, BayLDA.

You have the following rights:

• Request confirmation as to whether and to what extent your personal data is used and processed, as well as access to the personal data stored about you and additional information
• Request a copy of the personal data you have voluntarily provided to us in a structured, common and machine-readable format
• Request correction of the personal data we hold about you
• Request the deletion of your personal data
• Object to the processing of your personal data by us
• Request that we restrict the processing of your personal data
• Submit a complaint to a supervisory authority

Please note, however, that these rights are not absolute but are subject to our own legitimate interests and regulatory requirements. If you wish to exercise any of the rights listed here or would like further information, please contact our Data Protection Officer at:

Susanne KleiderKirchstr. 491483 Oberscheinfeld/PrühlMail: info@coduco.deTel. 49 9167 – 966 919 0

We retain your personal information for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods depend on the type of information collected and the purpose for which the information was collected, taking into account the specific circumstances of the case and the need to delete outdated, unused information as soon as possible. We retain customer personal information records, account setup documents, communications, and other information in accordance with applicable laws and regulations. We may correct, complete, or remove incomplete or inaccurate information at any time and at our sole discretion.

The processing of your personal data (i.e. any data that allows you to be identified by reasonable means; "personal data") is necessary to provide you with our services, to protect our legitimate interests and to comply with legal and financial regulatory obligations to which we are subject.By using this website, you consent to the collection, storage, use, disclosure and other uses of your personal data as described in this Privacy Policy.Please read the Privacy Policy carefully before making any decisions.

We collect two types of data and information from users. The first category includes non-identifying and non-identifiable user data provided or collected through use of the Website (“Non-Personal Data”). We do not know the identity of the user from whom Non-Personal Data was collected. The Non-Personal Data that may be collected includes aggregated usage data and technical data transmitted by your device, including certain information regarding software and hardware (e.g., browser and operating system used on the device, language preference, access time, etc.). We use this data to improve the functionality of our Website. We may also collect data about your activity on the Website (e.g., pages viewed, browsing behavior, clicks, actions, etc.).The second category includes Personal Data , which is data that identifies an individual or can be identified through reasonable measures. Such data includes:

• Device Data: We collect personal data from your device. Such data includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID), and other data resulting from your activity on the Website.
• With your consent, we will use your contact details (first and last name, email address, telephone number, address) to process your request/booking and to inform you about our offers and products for advertising purposes.
• Data will only be transferred to third parties with your consent or due to legal provisions (e.g. to the tax office, obligation to provide evidence), due to legitimate interests of our company (e.g. for tax advice) or within the framework of funding programs in which you can participate voluntarily.
• With your consent, we use data such as dietary preferences or requests for guest rooms to provide you with the best possible service during your stay at the Nussanger.
• With your consent, we use photos of you for our social media and promotional materials.
• With your consent, we will pass on your contact details to WhatsApp Inc. so that you can use the instant messaging service. Further information can be found in WhatsApp's privacy policy ( www.whatsapp.com/legal/#ip-policy ). WhatsApp is certified under the Privacy Shield Agreement and thus offers a guarantee that it will comply with European data protection law.
• We adhere to the principle that data that is no longer required is deleted as quickly as possible.

In addition to the various uses listed above, we may also share personal information with our subsidiaries, affiliates and subcontractors. In addition to the purposes listed in this Privacy Policy, we may transfer personal information to our trusted third party service providers located in different jurisdictions around the world for the following reasons:

• Hosting and operating our website
• Providing our services, including personalized display of our website
• storing and processing such data on our behalf
• Displaying ads and the ability to assess the success of our advertising campaigns, retargeting users
• Providing marketing offers and promotional materials related to our website and services
• Conducting studies, technical diagnoses or analyses

We may also disclose information when we have a good faith belief that doing so is helpful or appropriate to: (i) comply with applicable laws, regulations, legal processes or governmental requests; (ii) enforce our policies (including our Agreement) and investigate potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud, or security issues; (iv) establish or enforce our own legal claims or defend against the claims of others; (v) protect our rights, property, or safety, the safety of our users, your safety, or the safety of third parties; or (vi) cooperate with law enforcement authorities and/or protect intellectual property or other legal claims.

MinorsThe protection of children's data is very important, especially online. The website is not designed for children and is not aimed at them. The use of our services by minors is only permitted with the prior consent or authorization of a parent or guardian. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that his or her child has provided us with personal data without their consent, he or she can contact us at info@coduco.de.

We obtain your personal data from various sources:

• You provide us with such data voluntarily, for example when registering on our website.
• We receive such data when you use our website or access it in connection with one of our services.
• We receive such data from other providers, services and from public registers (for example from data traffic analysis providers).

We and our partners use cookies to provide the relevant services. This also applies when you visit our website or access our services. A “cookie” is a small package of data that is assigned to your device by this website when you visit a website. Cookies are useful and can be used for a variety of purposes. These include, for example, making it easier to navigate between different pages, automatically activating certain functions, saving your settings and optimizing access to our services. The use of cookies also enables us to show you relevant advertising tailored to your interests and to collect statistical information about your use of our services. This website uses the following types of cookies: a. “Session cookies”, which ensure normal system usage. Session cookies are only stored for a limited time during a session and are deleted from your device as soon as you close your browser. b. “Permanent cookies”, which are only read by the website and are not deleted when the browser window is closed, but are stored on your computer for a certain period of time. This type of cookie enables us to identify you on your next visit and, for example, to save your settings. c. “Third-party cookies” set by other online services that have their own content on the page you visit. These can be, for example, external web analytics companies that record and analyze access to our website.Cookies do not contain any personal data that identifies you, but the personal data we store may be linked by us to the data contained in the cookies. You can remove cookies via the device settings on your device. Follow the instructions provided. Please note that deactivating cookies may restrict certain functions when using our website.The tool we use is based on Snowplow Analytics technology. The data we collect about the use of our website includes, for example, how often users visit the website or which areas are accessed. The tool we use does not collect any personal data and is used by our web hosting provider and service provider solely to improve their own offering.

Use of script libraries (Google Web Fonts)To ensure that our content is displayed correctly and graphically appealing in every browser, we use script and font libraries such as Google Web Fonts ( www.google.com/webfonts ) for this website. Google Web Fonts are transferred to your browser's cache so that they only need to be loaded once. If your browser does not support Google Web Fonts or denies access, the content will be displayed in a standard font.

When you access script or font libraries, a connection is automatically established to the operator of the library. Theoretically, this operator has the opportunity to collect data. It is currently not known whether and for what purpose the operators of the relevant libraries actually collect data.

You can find the privacy policy of the operator of the Google library here: www.google.com/policies/privacy .

This policy only addresses the use and disclosure of information we collect from you. If you post information on other websites or disclose information to third parties on the Internet, different terms may apply, so please always read the terms and conditions and privacy policies carefully when you disclose information. This Privacy Policy does not address the business practices of companies that we do not own or control, or anyone other than our employees and staff, including third parties to whom we may disclose such information as described in this Privacy Policy.

We may use your personal information, such as your name, email address, phone number, etc. ourselves or share it with a third party subcontractor, to provide you with promotional materials about our services that may be of interest to you. We respect your right to privacy, so you will always be given the opportunity to opt out of receiving further marketing material in these marketing materials. If you opt out, your email address or phone number will be removed from our marketing mailing lists. Please note that even if you unsubscribe from receiving our marketing emails, we may still send you emails with important information that do not include an unsubscribe option. This includes maintenance messages or administrative notices.

We may transfer information in the event of a corporate transaction (e.g., sale of a substantial portion of our business, merger, consolidation, or asset sale). If any of the above occurs, the acquiring entity or company will assume the rights and obligations set forth in this Privacy Policy.