1. Controller

Controller and legally responsible for all processing of personal data on our website is

Messner Mountain Heritage GmbH
Pöttinger Str.25
82041 Oberhaching

Germany We have not appointed a data protection officer and are not obliged to do so. If you have any questions about how we ensure data protection on our website or if you would like to make use of your rights as described in section 2 below, you can contact us at the above postal address or at the following e-mail address: info@reinholdmessner.it

2. Your rights

We will be happy to provide you with information about whether and which of your personal data is processed by us and for what purposes (Article 15 GDPR). In addition, you have the right to rectification (Article 16 GDPR), the right to restriction of processing (Article 18 GDPR), the right to erasure (Article 17 GDPR) and the right to data portability (Article 20 GDPR), provided the conditions to exercise such rights are met. 

If our data processing is based on your consent as per Article 6 (1) a GDPR, you may freely withdraw this consent at any time without giving reasons (Article 7 (3) GDPR). Please note such withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

If our data processing is based on our legitimate interests as per Article 6 (1) f GDPR, you may, at any time, object to the processing of your data based on our legitimate interests as per Article 21 GDPR.

The exercise of these rights is free of charge.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the possibility to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

Telefon: +49 (0) 981 180093-0
Telefax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de

3. Automated individual decision-making, including profiling

We do not process your personal data in the context of a procedure for automated decision-making (including profiling) and do not intend to initiate such processing.

4. Recipients of Data

We transfer data to the following categories of recipients in the following circumstances:

• Insofar as we use Data Processors to fulfil the purposes stated in this Privacy Policy, we transfer personal data to these processors. Legal basis for such transfer is Article 28 GDPR.
• Insofar as necessary for the fulfilment of our contractual obligations, e.g. to a bank when issuing an invoice. Legal basis for such transfer is Article 6 (1) b GDPR.
• Insofar as necessary to meet our legal obligations, e.g. to authorized law enforcement and tax authorities. Legal basis for such transfer is Article 6 (1) c GDPR.
• Insofar as necessary to meet our legitimate interests, which include in particular the defense and enforcement of our legal claims. Legal basis for such transfer is Article 6 (1) f GDPR.

5. Processing of Data you actively share with us

5.1. Using our Website

Using our website is possible without actively sharing your personal data with us. If you actively provide us with your personal data (for example, name, address or e-mail addresses in a Contact Form), this is always at your free discretion and on a voluntary basis. Please note, however, that certain personal data is processed when you visit the website without you actively providing it. We will explain to you below in sections 7 ff. what data this is and what processing of this data takes place.

5.2. Using the Press Area

Access to the Press Area of our website requires the creation of a user account. If you are interested in creating a user account, you are welcome to apply. To do so, please contact us at info@reinhold-messner.de. When creating your user account, we will ask you to provide us with some information. In particular, this includes your title, name, occupation, postal address and e-mail address. We need and process this information in order to create and manage the user account. 

Legal basis for this data processing is Article 6 (1) b GDPR, i.e. the contract concluded with us for the provision of the user account. The contract ends when the user account is terminated, which is possible for both parties at any time without giving reasons. Your data will be deleted upon termination of your user account, subject to retention periods.

5.3. Contacting us

If you contact us, e.g. with an enquiry, we process your personal data provided in the enquiry in order to process, manage and respond to your enquiry.

Legal basis for this data processing is Article 6 (1) b GDPR, insofar as it concerns the initiation of a contract or servicing an existing contractual relationship. Otherwise, legal basis is Article 6 (1) f GDPR, namely our legitimate interest in communicating with people who are interested in our work as they desire.

Your data will be deleted when the purpose for storing the data no longer applies (e.g. after processing your enquiry has been fully completed), subject to retention periods.

6. “Cookies” and similar Identifiers

6.1. Cookies and our Consent Manager

On our website, we use technical means for various services and functions, which are stored on your device. These are, in particular, so-called “cookies”, but also similar identifiers, such as tracking pixels or web beacons (all such technical means are referred to in the following as "cookies"). Third parties may also be given the opportunity to store cookies on your device, especially if content or functionalities of such third parties are integrated in the website and used and/or activated by the user. Which elements of our website use cookies is explained in this Privacy Policy. Most of the cookies we use are so-called "session cookies": they are automatically deleted from your device after the end of your visit. Other cookies remain stored on your device for a set storage time or until you delete them. These cookies enable us to recognize your browser on your next visit.

You can decline the storage of cookies on your device at any time in the set-up of your browser software or may delete all cookies when you close the browser by default. Each browser has its own, specific cookie management options, and we recommend adapting these to your preferences. However, please note that if you refuse employment of all (or of specific) cookies, you will not be able to use all (or specific) functions of this website to their full extent.

When you access our website, our Consent Manager will pop up. The Consent Manager will ask you whether you consent to the use of cookies. You can call up the Consent Manager again at any time via the "Cookie Einstellungen" button and change any settings you have previously made.

6.2. Functional Cookies

Our website employs technically necessary cookies ("functional cookies") to provide the essential basic functions of the service. Without these functions, our website cannot be displayed completely and correctly. Hence, you cannot deselect these cookies if you wish to use our website.

We explain which cookies are functional cookies in this privacy policy, as well as in our Consent Manager. You cannot opt out of these cookies if you wish to use our website. The legal basis for our usage of such cookies is § 25 (2) Nr. 2 TTDSG. The legal basis for the processing of personal data in the context of the use of such cookies is Article 6 (1) f GDPR, namely our legitimate interest to offer you a functional and well operating website.

6.3. Other Cookies

In addition to functional coolies, we use optional cookies for which we require your consent: we only use these cookies after receiving your consent as expressed through the Consent Manager. The features using such cookies are only activated in the event of your consent and can may serve in particular to enable us to analyse and improve visits to our website, to make it easier for you to use it via different browsers or terminal devices, to recognize the device on the next visit or to display advertising (possibly also to tailor advertising to interests, to measure the effectiveness of advertisements or to show interest-based advertising).

We explain which cookies are optional cookies are in this privacy policy, as well as in our Consent Manager. The legal basis for the use of such cookies is your consent pursuant to § 25 (1) TTDSG. The legal basis for the processing of personal data in the context of the use of such cookies is explained below in connection with the explanation of the respective functions that employ the cookies.

7. Processing of Data when visiting the website

7.1. Logfiles

When you visit our website and view its contents, some information on the connection and the device used is transmitted:

• Browser type
• browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This information is temporarily stored in a so-called logfile until automated deletion, which regularly takes place within 24 hours.

We process this data in order to provide and display our website and the content contained on it, as well as to protect against brute force attacks. Legal basis for this data processing is Article 6 (1) f GDPR. Our legitimate interest in the processing results from the fact that the processing is technically necessary to display our website and to ensure the stability and security of the website. The data is deleted as soon as it is no longer necessary for the purpose described. You can always object to this legitimate interest.

7.2. Consent management with our Consent-Manager

As explained in Section 6 above, we enable you to control our use of cookies with the help of our Consent Manager. The Consent-Manager will be displayed on your first visit to our website and will give you the opportunity to select and manage your consent to our usage of Cookies. The Consent-Manager will store a functional cookie in your browser, to memorize the consent you have given, as well as a timestamp and some browser information, respectively your rejection or revocation of consent. The cookie has a lifespan of three months, i.e. will delete itself after this period. Additionally, our consent manager must communicate with your device, i.e. know its IP address, in order to function correctly.  

Legal basis for our usage of such cookie is § 25 Abs. 2 Nr. 2 TTDSG. Legal basis of the data processing is Article 6 (1) f GDPR. Our legitimate interest lies in offering a functional website and a satisfying user experience, while complying with legal requirements. We will delete data if you raise an effective objection in accordance with Article 21 GDPR, or if the purpose for storing the data no longer applies, subject to retention periods.

7.3. Google Analytics

We would like to know how visitors use our website and how we can improve its design and service. To analyze user behavior, we use the service “Google Analytics” on our website. The service uses cookies and processes the IP address used by your device.

"Google" is a group of companies and consists of Google Ireland Ltd. (provider of the service Google Analytics), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC. We have concluded an Data Processing Agreement with Google Ireland Ltd. as our service provider in accordance with Article 28 GDPR. Further information on Google Analytics as well as Google's privacy policy can be found here.

We deactivate "user ID function" when using Google Analytics. This means that, according to Google, no collection and allocation of user behavior with a pseudonymously created ID of the user takes place.

We use Google Analytics with the addition "_gat._anonymizeIp". This means that, according to Google, the IP address used by your device is immediately shortened and anonymised by Google within the European Union. According to Google, non-anonymised IP addresses only leave the European Union in exceptional cases. According to Google, the IP address transmitted by your browser as part of Google Analytics is also not merged with other data collected by Google.

The information generated by the cookies about your use of this website, which due to the anonymization of the IP address can regularly not be assigned to a person, is usually transferred to a Google server in the USA and stored there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. 

Legal basis for the use of this cookie is your consent in accordance with § 25 (2) Nr. 2 TTDSG. Legal basis for the data processing carried out in this context is your consent in accordance with Article 6 (1) a GDPR. You give us your consent via our Consent Manager (see Section 6 above), which you can use to revoke your consent at any time. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are lawful in accordance with the European Union's adequacy decision pursuant to Article 45 (1) of the GDPR.

8. Processing of Data when using embedded content on our website

8.1. Youtube

YouTube is a service provided by Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Please inquire with Youtube about the processing of personal data carried out by Youtube. The privacy policy of Youtube and Google can be found here. When you use Youtube, Youtube sets cookies on your browser. 

We use the "extended data protection mode" option provided by Google for linking or embedding YouTube videos. According to YouTube's information, no data is transmitted to the YouTube server during normal operation of our website. This only happens when you start a video by clicking on it. If the user is logged in to YouTube or another Google service at the same time, Google recognizes which specific subpage of our website the user is visiting when the YouTube video is clicked on. This information is collected by Google and assigned to the respective Google account of the person concerned. You can opt out of this at Google.

Legal basis for the use of this cookie is your consent in accordance with § 25 (2) Nr. 2 TTDSG. Legal basis for the data processing carried out in this context is your consent in accordance with Article 6 (1) a GDPR. You give us your consent via our Consent Manager (see Section 6 above), which you can use to revoke your consent at any time. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are lawful in accordance with the European Union's adequacy decision pursuant to Article 45 (1) of the GDPR.

If you wish to avoid Youtube setting a cookie in your browser or processing your personal data, please do not activate the videos.

8.2. Vimeo

Vimeo is a service provided by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. Please inquire with Vimeo about the processing of personal data carried out by Vimeo. You can find Vimeo 's privacy policy here. When you use Vimeo, Vimeo sets cookies on your browser.  

We have set up a so-called "two-click solution" for linking or embedding Vimeo. This means that the embedding is always inactive and no personal data is transmitted to Vimeo. This only happens when you start a video by clicking on it. If the user is logged in to Vimeo at the same time, Vimeo recognizes which specific sub-page of our website the user is visiting when the Vimeo video is clicked on. This information is collected by Vimeo and assigned to the respective Vimeo account of the person concerned. Vimeo always receives information via the embedding that the data subject has visited our website if the data subject is simultaneously logged into Vimeo at the time of calling up our website; this happens regardless of whether the data subject clicks on a Vimeo or not. If you do not want this information to be transmitted to Vimeo, you can prevent it from being transmitted by logging out of your Vimeo account before accessing our website.

Legal basis for the use of this cookie is your consent in accordance with § 25 (2) Nr. 2 TTDSG. Legal basis for the data processing carried out in this context is your consent in accordance with Article 6 (1) a GDPR. You give us your consent via our Consent Manager (see Section 6 above), which you can use to revoke your consent at any time. Please note that when using Vimeo, personal data is transferred to the operator of Vimeo in the USA. Legal basis for this transfer is your consent in accordance with Article 49 (1) (a) GDPR. You give us this consent via our Consent Manager (see point 6 above), which you can use to revoke your consent at any time.

If you wish to avoid Vimeo setting a cookie in your browser or processing your personal data, please do not activate the videos.

9. Our use of social media plug-ins

We do not use social media plugins on our website. If our website contains icons from social media providers (e.g. Instagram), we only use these to passively link to our pages on the respective platform: if you click on the icon, we will redirect you to our page on the corresponding platform. However, the icons themselves do not process, collect or send any data.

10. Privacy notice for our Social Media fanpage on Instagram

10.1. Joint Control

For our fanpage on Instagram, Messner Mountain Heritage GmbH (see Section 1 above for contact details) is Joint Controller together with:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Irland

10.2. Apllicability of informations given in our Privacy Policy

With regards to the responsibility assumed by us, please note the information given under Sections 1 through 5 above also applies to our fanpage on Instagram.

10.3. Purpose, categories of personal data and legal basis of data processing

by Messner Mountain Heritage GmbH:

We use Instagram for public relations and to market our services and our products. For this purpose, we process the data entered by the users of the social networks themselves (e.g. username, contents of the account).

Legal basis for this processing is Article 6 (1) f GDPR. Our legitimate interest in the processing results from the fact that we would like to present our company and our products to interested people on social networks as part of our public relations work and marketing. We ourselves do not pass on any of this personal data to third parties. The data is deleted within the scope of the possibilities made available to us by the social networks as soon as it is no longer required for the purpose described. You can always object to this legitimate interest.

by Meta Platforms Ireland Limited:

For information on how Meta processes your personal data when you visit the Instagram platform and our social media presence on Instagram, please refer to Meta's terms of use and data policies.

Please note that Instagram collects and processes a range of information when you visit our Instagram page, such as the IP address of your end device used. This information is used to provide us with statistical information ("insights") about the use of our social media presence. Since this data is transferred to us anonymously, it is not possible for us to relate this information to people.

However, it is unknown to us in which ways Meta uses the data from your visits on Instagram for its own purposes, to what extent activities on Instagram are assigned to individuals, how long Meta stores such data and whether data from a visit to Instagram is passed on to third parties. Meta does not share such information.

In which way Meta uses the data from the visit of Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Meta stores this data and whether data from a visit of the Instagram page is passed on to third parties, was not communicated to us by Meta and is therefore not known to us.

In the agreement on Joint Control we have concluded with Meta, Meta, as the operator of Instagram, acknowledges joint responsibility under GDPR with regard to Insights data and assumes essential obligations under data protection law to inform data subjects, to ensure data security and to report data protection breaches. In accordance with the agreement on Joint Control, Meta is the primary contact for the exercise of data subjects' rights. Meta has direct access to the required information and can provide information or take other measures.