Privacy Policy

Data protection declaration according to § 5 and § 13 Telemediengesetz (TMG) Information according to articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)



We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to the data protection regulations.


Controller responsible for data processing


Adelholzener Alpenquellen GmbH

St. Primus-Str. 1-5

83313 Siegsdorf

Phone: 08662 62-0

Fax: 08662 62-101



Registered in the commercial register at the local court in Munich: HRB 104599


Company data protection officer:


Lawyer Dr. Modlinger


Phone: 08662 / 62-0.


Sources and data for processing personal data

We process personal data that we receive from you as part of your Internet or social media use or that you have sent to us via the contact form.


Data is stored in server log files, which are collected and automatically saved by the provider and are mostly transmitted to us by your browser. These are:


  • Referrer URL
  • Host name of the accessing computer
  • Date and time of the server request
  • Name of the requested file
  • Page from which the file was requested
  • Web browser and operating system used
  • (Complete) IP address of the requesting computer
  • Amount of data transmitted



We may also process other data comparable to the categories mentioned above.


We collect the listed data to ensure a smooth connection of the website and to enable a comfortable use of our website by the users. In addition, the log file serves to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 para. 1 lit. f) GDPR.


Currently we also offer the following social media channels:




As part of the social media use, we can call up statistical usage data from the respective social media company. This can be information about page views and activities; access to individual articles, videos, services (e.g. route planner) etc.; comments, shared content, responses, usage rates: Men and women, origin related to country and city, language. The legal basis for retrieving data in social media use is Art. 6 para. 1 lit. f) GDPR.


Purpose of the processing and legal basis

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act of Germany(BDSG):


The legal basis for the storage of data or log files is Art. 6 para. 1 lit. f) GDPR.


If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties. We collect the data listed above to ensure a smooth connection to the website and to enable the users a comfortable use of our website. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. In addition, we store your data for reasons of technical security, in particular to prevent attempts to attack our web server.


Examples in this context:


  • examination and optimization of procedures for demand analysis and direct customer approach;
  • advertising or market and opinion research, e.g. by using cookies, as long as you have not objected to the use of your data;
  • enforcement of legal claims and defence in legal disputes;
  • Ensuring IT security and IT operation;
  • measures for business management and further development of services and products.


In particular, the social media companies will create so-called user profiles based on your usage behavior and use them for the placement of advertisements. For this purpose, cookies are usually stored on your computer and/or device.


Based on your consent, Art. 6 para. 1(1)(a) GDPR:


If you have given us your consent to process personal data for specific purposes (e.g. transfer of data to third parties, evaluation of data for marketing purposes), the legality of this processing is based on your consent. A given consent can be revoked at any time.


Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.


If you have given your consent to the social media companies for a specific data processing, the processing is carried out on the legal basis of Art. 6 para. 1 lit. a) GDPR.


Due to legal requirements, Art. 6 para. 1 lit. c) GDPR or in the public interest, Art. 6 para. 1 lit. e) GDPR.


We are also subject to various legal obligations, i.e. legal requirements. If data are processed in this regard, this is done exclusively on the basis of these regulations.


Data disclosure

Within the company, those positions receive the data that they need to fulfil our contractual and legal obligations. Processors commissioned by us (Art. 28 GDPR) may also receive data for these previously mentioned purposes. These are companies in the categories of IT services, telecommunications, consulting and advisory services as well as sales and marketing.


With regard to the transfer of data to recipients outside the company, it should be noted that we only pass on your data if this is permitted or required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be, for example:


  • Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities) when there is a legal or official obligation.


Other data recipients may be those entities for which you have given us your consent to the transfer of data.


Duration of storage

To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfil the respective purposes.


Data transmission to third countries

Data is only transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary for the execution of our social media offers, is required by law or if you have given us your consent. We will inform you separately about details, if required by law.


When visiting our social media offers, we would like to point out that when visiting the social media offers, data from you as a user outside the EU may be processed. The companies involved in this process have committed themselves as privacy-shield certified US providers to comply with the data protection standards of the EU. This applies to:




Use of cookies


Our website uses cookies that are stored by the browser on your device and contain certain settings for using the website (e.g. for the current session). Cookies serve to make our website more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your terminal until you delete them or the storage period expires. These cookies enable us to recognize your browser the next time you visit us.

The purpose of the cookies is to simplify website processes (e.g. the provision of already selected options) by saving settings. Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out on the basis of your consent in accordance with Art. 6 Para. 1 lit. a) GDPR and in order to ensure the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

You can declare a general objection to cookies used for online marketing purposes via the US site or the EU site

You can also deactivate the storage of cookies in the settings of your browser. Please note that in this case not all functions of this online offer can be used.


Google ReCaptcha


We use the service reCAPTCHA of Google Inc. for the contact form on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The purpose is to distinguish whether the input is made by a human being or by automated and machine processing. Your input is transmitted to Google and used by Google. The IP address and any other data required by Google for the service reCAPTCHA will be transmitted to Google. This data is processed by Google within the European Union and, if applicable, also in the USA. Data transfers to the USA are subject to an adequacy decision of the European Commission, the “Privacy Shield”. Google participates in the Privacy Shield and has submitted to the requirements.

The processing is carried out on the basis of Art. 6 para. 1 letter f) GDPR out of the legitimate interest to protect our website from automated spying, abuse and SPAM.

You can find more information about Google reCAPTCHA and its privacy policy at: and


Contact form and contact by e-mail


If you send us enquiries via contact form or e-mail, your details from the enquiry form or your e-mail including the contact details you provided there will be stored by us for the purpose of processing the enquiry and for the event of follow-up questions. Your name and e-mail address are required. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f) DSGVO and, if applicable, Art. 6 para. 1 lit. b) DSGVO, if your request is aimed at the conclusion of a contract. Your data will be deleted after the final processing of your enquiry, provided that there are no legal storage obligations to the contrary. In the case of Art. 6 para. 1 lit. f) DSGVO, you can object to the processing of your personal data at any time.


Google Analytics


On our homepage we use the web analysis service Google Analytics of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, to evaluate the use of our website, to compile reports on website activities and to provide further services related to website and internet use. The legal basis is the consent you have given us in accordance with Art. 6 Para. 1 lit. a) GDPR.

For this service, a cookie is set on your computer and the usage data stored in the process is forwarded to Google and transferred to and stored on a server, which is usually located in the USA.

Google uses this information to evaluate the use of our online offer and in particular to create user statistics with pseudonymised usage profiles. Google Analytics is only used with activated IP anonymisation, which means that the IP address of Google users within member states of the European Union or in other states party to the Agreement on the European Economic Area is shortened. Nevertheless, a transmission of the full IP address to a Google server in the USA cannot be excluded. Users can prevent the storage of cookies by refusing consent or by adjusting their browser software accordingly. Furthermore, you can prevent the transmission of the data stored by the cookie to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

For further information, please refer to the Google privacy policy:

Google has submitted to the US privacy shield: (


Social plugins

We use social plugins on the basis of our legitimate interests, i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 para. 1 lit. f) GDPR. When you visit our site, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click on Facebook while you are logged in to your respective account, you can link the contents of our pages on your Facebook profile. This allows your user profile to be assigned to your visit of our site. If you are not a member of Facebook, there is still the possibility that Facebook may learn and store your IP address. According to Facebook, in Germany only an anonymous IP address is stored. If you do not want Facebook to collect data via this online offer, you must log out of Facebook before using our online offer and delete your cookies.

We as the provider of the site have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information in the Facebook privacy policy at

Facebook offers a guarantee of compliance with European data protection law and is certified under the Privacy Shield Agreement


Facebook fan page

The operation of a Facebook fan places processing under joint responsibility in accordance with Art. 26 DSGVO. An agreement with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) has been made. This agreement can be found under the following link:


According to this agreement, we ourselves have no decisions or influence on the processing of the data by Facebook.

Facebook takes responsibility for the processing of the so-called “Insights data” as well as the fulfilment of the corresponding obligations from the GDPR.



Within our online offer, functions and contents of the Instagram service are integrated by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you call up a website that contains such a plug-in, your browser will establish a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and embedded into the page. This integration informs Instagram that your browser has called up the appropriate page on our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. When you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.


The information is also published to your Instagram account and displayed to your contacts.


If you do not want Instagram to associate the information collected through our web site directly with your Instagram account, you must log out of Instagram before visiting our web site.


For more information, please see Instagram’s privacy policy (


We only use the data provided to us by Instagram that is necessary for the purposes stated here. The processing serves to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

For more information, please refer to Instagram’s privacy policy:



Within the scope of a legitimate interest according to Art. 6 Para. 1 lit. f) GDPR, namely the attractive design of our websites, we use the provider YouTube for the integration of videos and integrate the media of YouTube for the presentation of videos (plugin). YouTube is a service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you call up the Internet page of our website that is equipped with such a plug-in, a connection to the YouTube servers is established and the plug-in is displayed. This tells the YouTube server that you have visited our website. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When you use the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment if you log out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and delete the corresponding cookies of the respective companies. YouTube is a subsidiary of Google and certified under the Privacy Shield Agreement. YouTube thereby offers a guarantee that it complies with European data protection law (

Further information on data processing and notes on data protection by YouTube (Google) can be found at



On our page www. we offer you to participate in competitions organized by us. The legal basis for the processing of data within the scope of the competition is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.

The storage serves the purpose of informing you by e-mail in case you win a prize. Furthermore, we save your IP address and the time of your registration at registration and confirmation in order to prevent misuse of your personal data and to be able to provide proof of correct sending.



Our websites contain AddThis plug-ins from AddThis, LLC, 1595 Spring Hill Rd, Suite 300, Vienna, VA 22182, USA. The plug-ins allow you to interact with social networks and other users with the purpose of improving our offer and making it more interesting for you as a user. The legal basis for the use of the plug-ins is your consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR. AddThis also provides tools for website operators, which should help to analyse and improve the use of their own website or to enable a direct user approach. AddThis also uses cookies and counting pixels, which enable log file recording and log file analysis. If you use an AddThis plug-in, your Internet browser establishes a direct connection to the servers of AddThis and, if applicable, to the selected social network. The data generated (such as time of use or browser language) is transferred to AddThis and processed there. If you send content from our website to social networks, a connection can be established between your visit to the website and your user profile of the corresponding social network.

If you do not wish to participate in this procedure, you can object to the data collection and storage at any time by setting an opt-out cookie with effect for the future:

Alternatively, you can set your browser to prevent the setting of a cookie.

Further information can be obtained from the provider AddThis at:

Further information on data processing and data protection by AddThis can be found at


ADITION technologies AG

On our homepage, we collect and store data for marketing and optimization purposes using the technology of ADITION technologies AG, Oststraße 55, 40211 Düsseldorf.

The data obtained can be used to create pseudonymous user profiles and cookies can be used for this purpose. However, the data collected is not used to personally identify the visitor to our website. There is also no consolidation of the data about the bearer of the pseudonym. ADITION technologies AG does not store any personal data by setting cookies. Only technical information such as the browser used or the installed operating system is analysed. The legal basis is Art. 6 Para. 1 lit. f) DSGVO.

You can object to the collection and storage of data at any time with effect for the future. An opt-out function is available on the company website for this purpose:


Duration of storage of personal data

To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfil the respective purposes.


Your rights

In the following, you will find information on the rights of data subjects that the applicable data protection law grants you towards the data controller with regard to the processing of your personal data:


  • Right of access:

The right to request information about your personal data processed by us in accordance with art. 15 of the GDPR.


  • Right of rectification:

The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.


  • Right of erasure:

The right, in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.


  • Right to restriction of processing:

The right to demand, in accordance with Art. 18 GDPR, the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to have it deleted and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.


  • Right to data portability according to Art. 20 GDPR:

You have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible


  • Right to lodge a comlaint with a supervisory authority:

You have the right to complain to a supervisory authority according to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state in which our registered office is located or, if applicable, that of your usual place of residence or workplace.


  • Right of withdrawal:

Right to withdraw consents granted in accordance with Art. 7 Para. 3 GDPR: You have the right to withdraw you consent at any time, with effect for the future, any consent to the processing of data that you have once granted. In the event of withdrawl, we will delete the data concerned immediately, unless further processing cannot be based on a legal basis for processing without consent. Withdrawl of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawl of consent;


We would like to point out that you can assert your rights as a person affected in connection with your social media use most easily against the respective social media company.

On Facebook you will find further information at:

At Instagram you will find further information at:


Right to object

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 paragraph 1 letter e) GDPR (data processing in the public interest) and Article 6 paragraph 1 letter f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data, unless we can prove compelling reasons for processing that are worthy of protection, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.


The objection may be made without any formality and should be addressed, if possible, to


Adelholzener Alpenquellen GmbH

St.-Primus-Strasse 1-5

Phone: 08662 / 62 – 0

Fax: 08662 / 62 – 399

E-mail address:


We would like to point out that your rights as a person affected in connection with your social media use can be asserted most easily against the respective social media company.

On Facebook you will find further information at:

At Instagram you will find further information at:


Obligation to provide data

Within the scope of Internet or social media use, you only need to provide personal data that is necessary for the use or that we are legally obliged to collect. Without this provided data a reasonable use may be limited or impossible.


External links

Insofar as links are provided to other websites, we have neither influence nor control over the linked contents and the data protection regulations there. When calling up linked websites, we recommend that you check the data protection declarations of these websites to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

Links to other websites

Our website contains hyperlinks to the websites of other providers. Clicking on these links will take you directly from our website to the website of another provider.

Automated individual decision-making

There is no fully automated decision making in accordance with Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.


Use of data for profile building (scoring)

We do not process your data with the aim of evaluating certain personal aspects (profiling). In the context of data collection through tracking services, your data is used to evaluate your usage behaviour and possibly to create movement profiles.



At this point we would like to point out further possibilities to protect your rights, setting options and to protect your privacy with social media companies.

Information from Facebook:

and in the “Information on Page Insights data”:




Download Infosheet customers PDF Download Infosheet customers

Download Infosheet business partners PDF Download Infosheet business partners

Download Infosheet internetusers PDF Download Infosheet internetusers

Download Infosheet employees and applicants PDF Downl. Infosheet employees & applicants