Data protection
Napcabs GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can be subject to security gaps. Complete protection of data against access by third parties is not possible.
The following privacy policy informs you as a user of napcabs GmbH Germany, An den Holzwiesen 6, 82131 Gauting (hereinafter referred to as the "Provider") about the collection and use of personal data when you visit and use our websites.
The legal provisions of data protection, in particular the Federal Data Protection Act (BDSG), the Telecommunications-Digital Services-Data Protection Act (TDDDG) and the EU General Data Protection Regulation (GDPR), are observed by us; we take the protection of your data very seriously.
This data protection declaration does not apply to websites which can be reached via hyperlinks on this website.
General data collection, data processing and server log files
On each visit to and use of the Provider's Internet pages, the following access data is automatically recorded by the Provider or by the web space provider in so-called server log files, which your browser automatically transmits to us: your IP address, the website accessed, the data accessed, the date and time of access, the amount of data transmitted, notification of successful access, browser type and version, operating system used, referrer URL/hostname of the accessing computer, and the previously visited website.
An IP address is personal data, since it can, in principle and together with additional information held by your internet service provider, be linked back to an individual; we treat it accordingly, even though in normal operation this data is not merged with other data sources or otherwise used to identify you.
The collection and processing of this access data takes place only in order to administer the system, to ensure the security and stability of the system, to optimise the offer, and for statistical evaluations. The Provider expressly reserves the right to subsequently evaluate the access data in the event of unlawful use and an unlawful attack on the Provider's Internet pages, insofar as there is sufficient suspicion based on concrete indications.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical operation, stability and security of our systems).
Personal data
Concept of personal data
Personal data are individual details about personal or factual circumstances of a specific or determinable natural person. This data includes, for example, name, address, e-mail address or telephone number. Usage figures also count as personal data.
Collection of personal data
Personal data will only be collected by the Provider to the extent permitted by law or if you consent to the collection of such data. Where you contact the Provider by e-mail or using the contact form, please see the "Contacting possibility via the website" section below for the applicable legal basis. Your data will be deleted once the respective processing purpose has been fulfilled, unless there is a legal obligation to retain it.
Cookies
Some of our Internet pages use so-called cookies and similar technologies (e.g. pixels, local storage). Cookies do not damage your device and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer.
We distinguish between technically necessary cookies, which are required for the basic functioning of this website, and non-necessary cookies, which we use, for example, for analytics, advertising and conversion measurement (see the sections below on Google Tag Manager, Google Analytics 4, Google Ads Conversion Tracking, Meta Pixel, and our video embeds).
Technically necessary cookies are used on the basis of our legitimate interest in providing a functioning website (Art. 6 para. 1 lit. f GDPR). All other, non-necessary cookies and similar technologies are only set after you have given your active consent via our cookie consent banner, in accordance with Sec. 25 TDDDG and Art. 6 para. 1 lit. a GDPR. You can grant, decline or withdraw your consent at any time via the cookie settings link in the footer of this website.
Most of the cookies we use are so-called "session cookies", which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them or their retention period expires; these enable us to recognise your browser during your next visit.
You can also set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, or generally exclude them, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Third-party content and services
This website integrates certain services and content from third parties, as described in the dedicated sections below (Google Tag Manager, Google Analytics 4, Google Ads Conversion Tracking, Meta Pixel, Google Web Fonts, and Vimeo). Loading this content may require transmitting your IP address to the respective third-party provider, as technically necessary for the connection.
Provision of chargeable services
If you wish to use the chargeable services offered on our website, we may have to collect additional data from you for billing purposes and for security reasons. This regularly involves your name, a valid e-mail address and, if applicable, your address and telephone number as well as further information, depending on the individual case. This may also include content that allows us to verify the information you provide, such as your ownership of the email address provided. For legal reasons, we must ensure that you actually wish to receive the services offered and that we are able to invoice you properly. To secure your data, we work in payment transactions with the SSL encryption standard, recognisable from the browser line "https://".
Privacy policy for the use of Google Tag Manager
This website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is a tag management system that allows us to manage and deploy the website tags described in this privacy policy (e.g. Google Analytics 4, Google Ads Conversion Tracking, Meta Pixel) through one interface.
Google Tag Manager itself does not create user profiles for analytics or advertising purposes, and, per Google's own documentation, does not collect, retain or share information about visitors to our website. Loading the container does involve standard HTTP request/log data (technical connection data such as your IP address), which Google states is deleted within 14 days. Google Tag Manager merely triggers the individual tags configured within it (e.g. Google Analytics 4, Google Ads Conversion Tracking, Meta Pixel), which collect data as described in the respective sections of this privacy policy. Consent settings and the deactivation of cookies via our cookie consent banner or your browser continue to apply to those individual tags.
Privacy policy for the use of Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of this website.
The information generated by these technologies about your use of this website is processed by Google to compile reports on website activity for us. For users in the EU, EEA, UK and Switzerland, Google Analytics 4 does not log or store individual IP addresses: your IP address is used only transiently, on servers located in the EU/EEA/UK/Switzerland, to derive coarse location data (such as city, region or country), and is then discarded before any further processing or transmission — no separate "IP anonymisation" setting is required for this, as it is built into Google Analytics 4 by default for these regions.
Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with further services related to website and internet usage. The data collected as part of Google Analytics 4 is not merged with other data held by Google.
Legal basis: This service is only activated if you have given your consent via our cookie consent banner (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future, e.g. via our cookie consent banner or by installing the Google Analytics browser opt-out add-on available at https://tools.google.com/dlpage/gaoptout?hl=en
Further information on Google's handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy
Privacy policy for the use of Google Ads Conversion Tracking
The Provider uses Google Ads (formerly Google AdWords), an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to place ads on Google Search and in the Google Advertising Network.
Within the scope of Google Ads, the Provider uses Conversion Tracking. When you click on an ad placed by Google, Google sets a click identifier (e.g. a "GCLID" parameter) and, subject to your consent, cookies on your device. If you subsequently visit certain pages of this website (in particular a completed booking on booking.napcabs.com), Google and the Provider can recognise that this resulted from a click on the ad, without personally identifying you. Each Google Ads customer receives separate, non-shared identifiers, so this data cannot be tracked across the websites of different Google Ads customers.
This measurement uses Google's consent mode, under which the categories of signals sent to Google (e.g. "ad_storage", "ad_user_data" and "ad_personalization") depend on the choices you make in our cookie consent banner. The resulting information is used to generate conversion statistics for the Provider, such as the total number of users who clicked an ad and completed a booking; the Provider does not receive information that personally identifies individual users.
Conversion Tracking is implemented via Google Tag Manager (see above) and, where technically necessary, together with the Google Ads Conversion Linker, to also measure bookings completed on our booking subdomain, booking.napcabs.com (see Privacy Statement – Online Booking).
Legal basis: This service is only activated if you have given your consent via our cookie consent banner (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future.
If you do not want to participate in tracking, you can decline the relevant categories in our cookie consent banner, disable cookies via your browser's user settings, or manage your ad personalisation via Google's Ads Settings at https://adssettings.google.com/
Further information on Google's data processing and your rights can be found in Google's privacy policy: https://policies.google.com/privacy
Privacy policy for the use of Meta Pixel
This website uses the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). Through the Meta Pixel, Meta receives information that you have visited this website or taken a specific action (e.g. started or completed a booking on booking.napcabs.com), so that we can measure the effectiveness of our advertisements on Facebook and Instagram for statistical and market research purposes and, where applicable, show you interest-based advertising ("Facebook Ads").
The data collected in this way is not directly identifiable by us as the operator of this website in the ordinary course of using this reporting data; we do not ourselves draw conclusions about the identity of individual users. It is stored and processed by Meta, however, so that a connection to the respective Meta user profile is possible and Meta can use the data for its own purposes, including its own advertising purposes, in accordance with Meta's Data Policy. This enables Meta to place advertisements on Facebook, Instagram and on partner websites outside of Facebook. This data processing may also be carried out for other purposes not known to us, over which we, as the operator of this website, have no influence.
For the collection and transmission of data via the Meta Pixel up to the point Meta receives it, the Provider and Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26 GDPR, on the basis of Meta's "Controller Addendum" to its Business Tools Terms. Meta is solely responsible for all subsequent processing of this data. An overview of the respective responsibilities is available at: https://www.facebook.com/legal/controller_addendum
Legal basis: This service is only activated if you have given your consent via our cookie consent banner (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time with effect for the future.
Further information on the purpose and scope of data collection, further processing and use of the data by Meta, as well as your rights and setting options for protecting your privacy, can be found in Meta's Data Policy: https://www.facebook.com/privacy/policy/. You can object to interest-based advertising here: https://www.facebook.com/ads/preferences/ (requires a Facebook login) or via the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.com/
Privacy policy for the use of Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), for the uniform display of fonts. When you call up a page, your browser loads the required web fonts from Google's servers into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using connects to Google's servers, which gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font stored on your device is used instead.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at https://policies.google.com/privacy. Note: several German courts have held that loading Google Fonts dynamically from Google's servers without consent can infringe the GDPR; we are evaluating self-hosting these fonts locally, which would remove the need for this section entirely.
Privacy policy for the use of Vimeo
Our website integrates videos from the video platform Vimeo, operated by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA ("Vimeo"). For users in the EEA, UK and Switzerland, Vimeo's designated representative is the European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
Each time a Vimeo video embedded on one of our pages is loaded, your browser establishes a connection to Vimeo's servers in order to display the video player. This transmits your IP address to Vimeo and may set cookies used for playback functionality and, depending on your Vimeo account settings, for analytics or advertising purposes.
Legal basis: Embedded Vimeo videos are only loaded if you have given your consent via our cookie consent banner (Art. 6 para. 1 lit. a GDPR). We further recommend implementing Vimeo's "Do Not Track" embed parameter (dnt=1), which disables non-essential player cookies, together with a click-to-load placeholder, so that no connection to Vimeo is established before you actively interact with the video.
Further information can be found in Vimeo's privacy policy: https://vimeo.com/privacy
Contacting possibility via the website
Due to legal regulations, the Provider's website contains information that enables rapid electronic contact with our company and direct communication with us, including a general e-mail address. If you contact the Provider by e-mail or via a contact form, the personal data you transmit is automatically stored for the purposes of processing your request or contacting you, and is not passed on to third parties.
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures / responding to your enquiry) or, where no contractual relationship is intended, Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to enquiries).
SSL encryption
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
Objection to advertising e-mails
In the context of the legal imprint obligation we must publish our contact data. These will be used by third parties partly to send unsolicited advertising and information. We hereby object to any sending of advertising material of any kind not expressly authorised by us. We would like to point out that the unauthorised transmission of advertising material can affect competition law, civil law and criminal law.
Your rights as a data subject
You have the following rights with regard to your personal data, provided the respective legal requirements are met:
If you wish to exercise any of these rights, or if you believe that we have stored incorrect data about you, please contact us at: datenschutz@napcabs.com
You furthermore have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0)981 180093-0 · Website: https://www.lda.bayern.de
The Provider reserves the right to amend this data protection declaration at any time in accordance with the applicable data protection regulations.
Provider
napcabs GmbH Germany
E-Mail: datenschutz@napcabs.com · Phone: +49 89 943894 250
An den Holzwiesen 6, 82131 Gauting / Germany
E-Mail: info[at]napcabs.com · Website: www.napcabs.com
Registered Office: Munich, Germany · Commercial Register: HRB 173577