Menu

Information about processing your data

Pursuant to article 6 of the General Data Protection Regulation (GDPR) we are obligated to inform you about the processing of your data when using our website. We take the protection of your personal data very seriously and this declaration will thereby provide details about the processing of data as well as your legal rights concerning this matter.

We reserve the right to adapt the terms of this declaration to take effect in the future at any time, especially with regard to enhancements of our website, the employment of new technologies or changes in the legal basis.

We recommend to review the data protection declaration every now and then and to keep a copy for your files.

Terminology

  • The terms “website“ or „online presence“ refer subsequently to all sites of harzinfo.de.
  • “Personal data“ include all information that relate to an identified or identifiable natural person. A person is identifiable, if a characteristic value such as a name, an ID-number, GPS data, an  individual online identifier or other specific attributes, can be directly or indirectly ascribed to the physical, physiological, genetic, economic, cultural or social identity of this individual. Personal data thereby include for instance: name, e-mail address and telephone number of a person but also information about preferences, hobbies and memberships.
  • The term “processing“ describes operational sequences or a number of operational sequences conducted with or without the help of automatic techniques – in connection with personal data such as the collection, the organisation, the storage, the adaption, the modification, the read-out, the query, the usage, the disclosure by transmission, the distribution or any other form of provision, the synchronisation, the linkage, the limitation, the deletion or the elimination.
  • The term “pseudonymisation“ describes the processing of personal data in a manner that the personal data can no longer be ascribed to a specific individual without consulting additional information; provided this additional information is kept separately and are subject to technical and organisational precautionary measures guaranteeing that the personal data cannot be allocated to an identified or identifiable natural person.
  • The term “consent” consecutively means any voluntarily given informed and unmistakeable statement of will for a specific case in the form of a declaration or any other unambiguous and confirmative action, which suggests that the person in question agrees to the processing of the data concerning him or her.
  • In the following, the term “Google” means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; in the European Union contactable here: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

I. Area of application

This data protection declaration applies to all sites of www.harzinfo.de. It does not extend to any websites or online presences of other providers to which links may exist.

II. Controller responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) responsible for data processing on this website is:
Harzer Tourismusverband e.V.
Marktstraße 45
D-38640 Goslar
Represented by Martin Skiebe
Phone: +49 (0) 53 21 / 34 04-0
Fax: +49 (0) 53 21 / 34 04-66
Email: info@harzinfo.de

III. Questions about the data protection

If you have questions about the personal data protection with regard to our company or website, you may address our data protection officer:

Harzer Tourismusverband e.V.
data protection officer
Marktstraße 45
38640 Goslar
Phone: +49 (0)5321 34040
datenschutz@harzinfo.de

IV. Security

In order to protect your personal data against unauthorised access, misuse, loss and other external interferences we have taken comprehensive technical and organisational precautions. We check and update our security measures regularly.

V. Your privacy rights

Concerning your personal data you have the following rights you may assert:

  • the right of access pursuant to Art. 15 GDPR
  • the right to rectification pursuant to Art. 16 GDPR or Right to erasure pursuant to Art. 17 GDPR
  • the right to restrict processing pursuant to Art. 18 GDPR
  • the right to object the data processing pursuant to Art. 21 GDPR
  • the right to withdraw your consent pursuant to Art. 7 (3) GDPR
  • the right to obtain the data in a structured, commonly used and machine-readable format (“data portability”) and the right to transmit this data to another controller, provided that the requirements mentioned in Art. 20 (1ab) are met.

You may assert your rights by contacting our data protection officer, see section “responsible controller”. Furthermore you have the right to lodge a complaint with a supervisory authority responsible about the manner we process your personal data (Art. 77 GDPR)

VI. Using our website, access data

You may generally use our website for information purposes only without disclosing your identity. When calling up single pages of our website to this effect we merely transmit access data to our website provider, so that the website can be displayed. Access data include the following:
•    date and time of access
•    browser type / version
•    operating system
•    language and version of browser software
•    host name of the accessing device used
•    IP address
•    Linking website
•    Content of the website demanded
•    Date and time of access
•    Access status / HTTP status code
•    Referring url (source/link from which you accessed the page)
•    volume of data sent
•    time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address is necessary to technically enable the display of the website on your device. Therefore processing your IP address for the length of the session is required. Legal basis of this procedure is section 6 (1) sentence 1 of the GDPR.

The access data will not be used to identify single users and will not be consolidated with other data sources. The access data will be deleted when they are no longer required for their original purpose. This is the case when you end your visit on our website.

IP addresses are saved in so-called log files to ensure proper functioning of our website. Moreover, we use the data to optimise our website and to ensure the security of our IT-systems. In this regard the data will not be analysed for marketing purposes. The data will be deleted after seven days, the processing beyond that is possible for individual cases. If so the IP address will be deleted or alienated so that it can no longer be allocated to the client in question.

The data collection and the processing in so-called log files are imperative in order to provide and run the website. You have the right to object to the processing of your data on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

VII. Cookies

Besides the access data so-called cookies will be saved by your browser while visiting the website. These are small text files with a sequence of numbers that are stored locally in a temporary file of your browser. Cookies do not become part of your computer system and cannot run any programs. Cookies help us to ensure a good experience for our users. The use of cookies can be necessary for technical reasons or other purposes (e.g. analysing or evaluating website statistics).

a) Strictly necessary cookies.
Some elements of our website require that the calling browser can be identified after changing a page. The following data will be then processed by cookies: language settings, entries made into our contact or order forms and event search.

Data collected by strictly necessary cookies will not be used to create user profiles. We also work with so-called “session cookies”, these save a session ID which allows to allocate different queries of your browser to one session. Session cookies are necessary in order to use our website. Most notably they allow us to recognise the end device used when you return to the website. We use these cookies to recognise you on your next visits when you own an account with us; otherwise you would need to register again and again when visiting our website. Legal basis for this kind of processing is Art. 6 (1) lit. f GDPR. We work with cookies to make visiting our website more attractive and effective. Session cookies are deleted as soon as you log out and close your browser.

Most browsers are preset to accept cookies automatically. You can object data processing via cookies. You have the right to object to the processing of your data on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.
By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.

b) Performance cookies (not necessary for technical purposes)
We also work with cookies that help us analyse the user’s browsing habits and preferences. For example, the following data is stored and processed with the help of cookies: search items entered, number of page visits and the use of website functions.
These cookies make visiting our website more attractive and effective. Session cookies are deleted as soon as you log out and close your browser. Legal basis for this kind of processing is Art. 6 (1) lit. f GDPR. These performance cookies are automatically deleted after a certain amount of time varying from cookie to cookie.

You can object data processing via cookies. You have the right to object to the processing of your data on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.
By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.

In case we use third party cookies on our website we will indicate so below.

c) Cookie consent banner
When calling upon our website a cookie consent banner informs about the usage of cookies and this data protection declaration. In this regard you will be also informed how to prevent the storage of cookies and how to program your browser accordingly.

VIII. Contacting our company

When contacting our company via email or the contact form on our website the personal data you entered will be used to answer your query or to process your order.
Imperative for processing queries that reach us via the contact form on our website is entering a name or a pseudonym and a valid email address. When the query is sent the following data will be processed: IP address, user agent (e.g. browser type, email program), date and time of registration.

Legal basis for this kind of processing is Art. 6 (1) lit. f GDPR and Art. 6 (1) lit. b respectively, when a contract is concluded by contacting us.

The processing of personal data from the entry mask merely helps us answering your query. If you contact us via email your personal data will be processed for the same reasons. Other personal data transferred when using the contact form helps us to prevent misuse and to ensure the security of our IT systems.

In this case the personal data will not be passed on to third parties. The data will exclusively be used to process the query. The data will be deleted after it is no longer needed for processing, or we limit the processing to the existing legally mandatory record retentions.

You can object the processing of your personal data transferred via contact forms at any time. You can object data processing via cookies. You have the right to object to the processing of your data on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).The right to object especially exists if the processing is not necessary in order to fulfil a contract, if so this will be disclosed in the preceding descriptions of the functions. In this case the continued processing may not be possible. In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

IX. The processing and transferring of personal data due to contractual purposes

We process your personal data if it is necessary for the initiation, motivation, execution and/ or closure of a legal transaction with our company. Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit. b GDPR.

After serving a purpose (e.g. to settle a contact) the personal data will be blocked for further processing or deleted. Unless we are entitled to further safekeeping and cohesive processing due to your given consent (e.g. consent to process the email address in order to send electronic advertisements), a contractual agreement, a legal authorisation (e.g. authorisation to send direct mail) or due to legitimate interests for further safekeeping (e.g. for the settlement of claims).

In this respect personal data will be passed on, if

  • it is necessary for the establishment, execution and closure of legal transactions with our company (e.g. data transfer to a payment service provider / mail-order firm to complete a contract with you), (Art. 6 (1) sentence 1 lit. b) GDPR) or
  • a subcontractor, who is exclusively deployed by us to carry out the service you asked for, needs the data (such auxiliary persons are, if you are not notified otherwise, authorised to process your data to the extent needed to fulfil the service) or
  • an enforceable official order exists (Art. 6 (1) sentence 1 lit. c) GDPR), or
  • an enforceable judicial order exists (Art. 6 (1) sentence 1 lit. c) GDPR), or
  • we are obliged by law (Art. 6 (1) sentence 1 lit. c) GDPR), or
  • the processing is necessary to protect vital interests of the data subject or of another natural person (Art. 6 (1) sentence 1 lit. d) GDPR), or
  • we are authorised or obligated to pass on data due to mostly legitimate interests (Art. 6 (1) sentence 1 lit. f) GDPR).

Your data will not be circulated beyond the conditions mentioned above unless you have given your consent. Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit. a) GDPR.

X. Data processing and circulation for order handling

If you place an order in our shop online or if you want to order brochures it is necessary for the initiation and conclusion of the contract that you enter your personal data such as name, postal address and e-mail address. The personal data required for the implementation of the contract will be marked as such, further data can be given on a voluntary basis. Your data will be processed in order to fulfil the order. We will pass on your payment data to the payment-service-provider of your choice, or to our bank respectively and to our shipping service provider. The legal basis for the forwarding of the data in this case is Art. 6 (1) letter b GDPR. The order transaction on our website is secured by the TLS technology to protect your personal data from being accessed by unauthorised third parties.

We will delete the data collected after its storage is no longer necessary or we will limit processing in case we are legally obligated to retain the data. Due to regulations of commercial and fiscal law we are obligated to retain your address, payment and order details for ten years. Two years after the termination of the contract we limit data processing and reduce processing to fulfilling existing legal obligations.

XI. Registration / password protected section of website / Usage of image database

In order to use the password protected section of our website you need to register with your name, postal address and email address. Obligatory data is especially marked, all others are optional.

Legal basis for this processing is Art. 6 (1) sentence 1 lit. b) GDPR. The data will be deleted as soon as its purpose is fulfilled and no legitimate interests oppose to the deletion. Due to regulations of commercial and fiscal law we are obligated to retain your address, payment and order details for ten years. Two years after the termination of the contract we limit data processing and reduce processing to fulfilling existing legal obligations.

Moreover, at the time of registration the following data will be processed: IP address, user agent (browser type, email program) as well as date and time of registration. You may download images in the password protected section.

The processing of the IP address, user agent, date and time of registration is solely needed to fulfil your request to register with us. Legal basis for this processing is Art. 6 (1) sentence 1 lit. f) GDPR. The processed personal data serves to prevent misuse of the registration and to ensure the security of our IT systems.

The data is exclusively needed in order to provide access to the image data base. The data will only be given to third parties if it is necessary in order to provide access to the image database. We will delete the data collected after its storage is no longer necessary or we will limit processing in case we are legally obligated to retain the data.

You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).The right to object especially exists if the processing is not necessary in order to fulfil a contract, if so this will be disclosed in the preceding descriptions of the functions. In this case the continued processing may not be possible. In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

XII. Registration for events

You may register as a participant for our events or for events, that we are part of, online on our website. Legal basis for the data processing in this case is Art. 6 (1) sentence 1 lit. b) GDPR. The processing is necessary in order to justify, execute and complete legal transactions with our company (e.g. also with regard to transferring the data to a payment or mailing service to fulfil your contract).

Your name, company, email address as well as your invoice address if applicable must be entered in the registration form. The purpose of the data processing in this case is keeping you updated, optimising the company’s image and public relations as well as completing the payment and invoicing. Once registered for a certain event your personal data will be processed for its preparation and execution.

Your data will not be transferred to third parties.

Data collected in this case will be deleted after its storage is no longer necessary or if legal obligations exist, we will limit the processing accordingly.

XIII. Job postings on our website

We publish job postings on our website https://www.harzinfo.de/service/harzer-tourismusverband/jobportal.html. In the following we inform you about the processing of your data with regard to your application. We process the data you provided us in your application in order to assess your suitability for the job and to execute the application process.

Legal basis for the processing of your data in this case and if applicable, the transferring thereof to the company posting the job, is primarily Art. 26 FDPA as amended on May 25th, 2018. Thereafter the data processing is admissible for hiring decisions. In case the data is needed for legal prosecution after the application process is completed the data can be further processed on the basis of Art 6 GDPR; especially to protect justified interests according to Art. 6 (1) lit f) GDPR. Our concern will then be the enforcement of and the defence against any claims.

Data of refused applicants will be deleted after six months. In case you agreed to the storage of your data we will keep your application for possible future job postings. It will be deleted after two years. In case you received a positive response your application data will be transferred into our personnel data system.
Once received your application data will be reviewed by human resources. Suitable applications will then be given to the person responsible. Further steps will then be discussed. Principally your data can only be accessed by persons within our company who need the information to orderly complete the application process.

You have the right to object to the processing of your personal data for contact queries at any time on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).

The right to object especially exists if the processing is not necessary in order to fulfil a contract, if so this will be disclosed in the preceding descriptions of the functions. In this case the continued processing may not be possible. In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

XIV. Email Marketing

Newsletter

You may subscribe online for our newsletter which informs you regularly about

  • our services and marketing offerings
  • our own events as well as services and events of third parties
  • special offerings and timely limited offerings
  • press information and invites to press conferences (if you are registered with our press mailing service)

In order to receive the newsletter you have to submit name or pseudonym of the recipient and a valid email address.

Your subscription will be realised via a double opt-in procedure. After you filled in all the required data in the online form an email will be send to your email address asking you to expressively confirm your newsletter subscription. This way we ensure you actually wish the subscription. If we do not receive confirmation from you within 24 hours we will block the data transmitted to us and delete them automatically after one months at the latest.

Moreover the following data will be transferred to us at the time of subscription:

  • IP address
  • Date and time of registration
  • Time of the confirmation

We process your IP address, the time of your registration and confirmation to document your subscription and to prevent misuse of your personal data. Legal basis of this kind of processing is Art. 6 (1) sentence 1 lit. f) GDPR. We process this data at the end of two years after termination of contract. We delete the data if the newsletter subscription is terminated.

After your confirmation we process the email address, name or pseudonym of the recipient in question for the purpose of our email newsletter distribution. Legal basis of this kind of processing is Art. 6 (1) sentence 1 lit. a) GDPR. We delete the data when you terminate your subscription. If we do not make use of the reservation to direct marketing or of your willingness to receive newsletters within the first six months, this option expires.

Revoking your confirmation to the processing of your email address for newsletter purposes is possible at any time. This can be done either via mail to us (see contact data here ‘contoller responsible’) or by activating the link to unsubscribe that can be found in any newsletter. The unsubscription of the newsletter is without prejudice to the legality of the data processing agreed to by conformation until its revocation (Art. 13 (2) lit.c) GDPR.

We point out that we evaluate your online behaviour regarding the newsletter. In order to do so the emails contain so-called webbeacons or tracking pixel. For the evaluation we connect the data described under ‘access data’ and the web beacons with your email address and an individual ID.

We register when you read the newsletter, which links you follow and we draw conclusions from it to determine the online behaviour of our newsletter subcribers. The information will be processed as long as you are a subscriber to the newsletter. After you have unsubscribed we process the data only statistically and anonymously. Legal basis of this kind of processing is Art. 6 (1) sentence 1 lit. f) GDPR. We collect the data to improve our newsletter and to make our offerings more compelling.

You have the general right to object to the data processing for direct marketing purposes without giving reasons (Art. 21 (2) GDPR). You may object to the data tracking at any time by clicking on the unsubscribe-button found in every newsletter or you inform us via mail, see contact details here ‘controller responsible’. You may also stop the tracking by deactivating the image display in your email programme. In this case the newsletter will not be completely displayed and you may not be able to use all functions. Agreeing to the display of images manually activates the tracking described above.

The email marketing service ‘SuperWebMailer’

We use the email marketing service ‘SuperWebMailer’ for the distribution of our newsletters. It is a service by Mirko Böer, Malachitstraße 16, 04319 Leipzig; and allows us to organise the newsletter distribution and the analysis thereof. Data you entered in order to receive the newsletter (e.g. your email address) will be saved on storage units operated by SuperWebMailer in Germany.

The newsletter distribution via SuperWebMailer allows us to analyse the online behaviour of the newsletter subscribers – for example how many subscribers have opened the newsletter and how often a particular link was clicked on. With the help of so-called conversion tracking we can determine whether a certain pre-defined action was carried out after clicking on a link (e.g. the purchase of a product on our website).

The evaluation of this data helps to recognise reading habits of the subscribers, and to adapt the newsletter content accordingly and improve its distribution. Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit. f) GDPR. We process these data until two years after the termination of the contract. We delete the data if the newsletter subscription is terminated. We have no notice of the storage duration at ‘SuperWebMailer’ and cannot influence it.

You find more information on the privacy terms of ‘SuperWebMailer’ here: https://www.superwebmailer.de.

XV. Hosting

We use external hosting services from a company called neusta destination solutions GmbH; situated in Leopoldstrasse 16, 80802 Munich. They provide the following services: infrastructure and platform services, computing capacity, data storage and data bank services as well as security and technical services. In doing so all data will be processed, that is necessary to operate and use our website.

We use external hosting services to operate the website. The purpose of employing external hosting services is to ensure an efficient and secure provision of our website. Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit. f) GDPR.

The data gathering, its provision, usage and processing via external webhosting providers is essential in order to operate the website. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

XVI. Including content of third parties

Our website shows content of third parties, such as videos, maps, rss-feeds or figures from other websites. Doing so always requires these content providers to notice the user’s IP address. Otherwise their content cannot be sent to the user’s browser. Therefore the IP address is essential for the content presentation.

We seek to use third party content that only process the IP address in order to supply the content. However, we have no bearing if the third parties process the IP addresses e.g. for statistical analysis. If there are cases we know about we will clarify that below.

Some third parties might process data outside the European Union.

You may object by installing a java script blocker, e.g. the browser plug-in ‘noscript’, or you deactivate the java script in your browser settings. You may object on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). Doing so may result in limited website functions.

1. Google Web Fonts

We use web fonts provided by Google for a uniform website presentation. By calling upon a website your browser loads the necessary web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose your browser needs to connect with server from Google. This way Google is notified that our website was called upon by your IP address. We use web fonts provided by Google for the purpose of a uniform website presentation. This represents a justified interest in terms of Art. 6 (1) sentence 1 lit. f. GDPR. We have no information about the storage time and have no influence on it. You find more information about the Google Web Fonts here https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/.

You have the right to object to the processing by changing your browser settings so that your browser does not support the Web fonts: This way the default fonts of your computer will be used. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.

2. Google Tag Manager

We employ the Google Tag Manager on our website. The Google Tag Manager is a solution used by marketers to manage website tags on a user interface. The tool itself is a cookie-less domain not gathering any personal data. The tool initiates other tags that might gather data. The Google Tag Manager does not take hold on this data. A deactivation on domain or cookie level remains active for tracking tags implemented by the Google Tag Manager.

3. Google Maps

On our website, the Google Maps service by Google is used for the display of maps or partial maps and allows an easy use of the website’s map function.

Visiting our website Google is notified that you called upon a specific sub site of our website. Moreover, data defined in section ‘access data’ will be transferred to Google. This is irrespective of you being logged in in a Google account or not. If you are logged in with a Google account the data will be attributed to your account. If you do not wish to be recognised by Google you need to log out before activating the button.

Google saves data as user profiles which are processed for the purposes of marketing, market analysis and/or to tailor the Google website to the user’s need. The analysis is especially used to display tailored ads and to inform other users of social networks about your activities on our website.

Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit f) GDPR. The processing allows us to make our website more attractive and to offer additional service. We have no information about the storage time and have no influence on it.

More information about the purpose and the scope of processing by the plug-in provider can be found in the provider’s data protection declaration. Here you can also find more information about your rights in this regard and setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google processes your personal data also in the USA and submitted to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework. Google’s certificate can be found here https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Further information about the terms of use of Google maps can be found here https://www.google.com/intl/de_de/help/terms_maps.html.

You can object this kind of processing. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.
By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.


4. Open Street Map

On our website, the OpenStreetMap service by FOSSIGIS e.V., Römerweg 5, 79199 Kirchzarten, Germany, is used for the display of maps or partial maps and allows an easy use of the website’s map function.

By visiting our website OpenStreetMap obtains information about your user behaviour including your IP address, which may be collected via cookies and may be processed within the European Union. The data transfer complies with the data security conditions of OpenStreetMap, which can be found here: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

Legal basis for the processing is Art. 6 (1) sentence 1 lit. f) GDPR. The processing helps to make our information online more attractive and to offer additional service. We have no information about the storage time and have no influence on it.

You can object this kind of processing. In order to do so you need to contact OpenStreetMap. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). In case of a justified claim we analyse the situation and we will then either cease or adjust the processing, or we will name important reasons worthy of protection why we will need to continue processing.
By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.


5. Outdooractive

This website uses the technology and content of the Outdooractive platform. This website uses the route planner by Outdooractive (Outdooractive GmbH & Co. KG, Missener Straße 18, 87509 Immenstadt) in order to display biking, hiking, running and rollerblading tours.

When using the route planner on our website Outdooractive obtains the data defined in the section ‘access data’. Moreover, cookies as explained in the section ‘cookies’ may be employed. On the basis of this data Outdooractive tracks the selected tours, downloads and GPS-Tracks. Outdooractive saves this data within the European Union and processes them for marketing and market analysis purposes as well as to create a user-friendly website.

Legal basis for the processing is Art. 6 (1) sentence 1 lit. f) GDPR. The processing helps to make our information online more attractive and to offer additional service. We have no information about the storage time and have no influence on it.

More information about the purpose and the scope of processing by Outdooractive can be found in the provider’s data protection declaration. Here you can also find more information about your rights in this regard and setting options in order to protect your privacy: https://www.outdooractive.com/de/datenschutz.html

You can object this kind of processing. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).
By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.


6. YouTube videos

On our website we employ plug-ins of YouTube.de or YouTube.com respectively; a service – represented by Google – operated by the YouTube LLC (situated in 901 Cherry Avenue, San Bruno, CA 94066, USA; “YouTube“). By employing plug-ins we are able to embed visual content on our website, which we have published on YouTube.de or YouTube.com.

All videos are embedded using the extended data security mode, meaning no data about you as a user is transferred to YouTube if you do not play the videos. Only if you play the videos the following information will be transferred. We have no influence on the data transfer.

When visiting our website YouTube is notified that you called upon a specific sub site of our website. Moreover, data defined in section ‘access data’ will be transferred to YouTube. This is irrespective of you being logged in in a YouTube account or not. If you are logged in with a Google account the data will be attributed to your account. If you do not wish to be recognised by Google you need to log out before activating the button. YouTube saves your data as user profiles which are processed for the purposes of marketing, market analysis and/or to tailor the Google website to the user’s need. The analysis is especially used to display tailored ads and to inform other users of social networks about your activities on the website. Google processes your personal data also in the USA and submitted to the EU-US Privacy Shield. www.privacyshield.gov/EU-US-Framework. Google’s certificate can be found here https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Legal basis for this kind of processing is Art. 6 (1) sentence 1 lit f) GDPR. The processing allows us to make our website more attractive and to offer additional service. We have no information about the storage time and have no influence on it.

More information about the purpose and the scope of processing by YouTube can be found in the provider’s data protection declaration. Here you can also find more information about your rights in this regard and setting options in order to protect your privacy: http://www.google.de/intl/de/policies/privacy.

You can object this kind of processing. In order to do so you need to contact YouTube directly. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). By changing your browser settings you may deactivate or limit the transfer through cookies. Cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated some website functions can possibly no longer be used to the full extent.

XVII. Services for statistical, analytical and marketing purposes

We employ services of third parties for statistical, analytical and marketing purposes from third parties. This way we are able to present you with a user friendly and optimised website. The service providers employ cookies (see section ‘cookies’). Personal data is not being processed unless it is not explained otherwise in the following section.

Some third party service providers provide the possibility to directly object the employment of a particular service, e.g. by implementing a so-called opt-out cookie.

If you activate a respective opt-out cookie the third party provider will no longer process data that allows conclusions about your user behaviour. A selective objection to an individually made choice of external service providers is also possible. If you change your browser or the device used or you delete all cookies, then you need to activate the opt-out cookie again.

Moreover, you may want to manage your cookies by using the op-out-platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW; ~ National Association of the Digital Economy) which can found here www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or you may object directly by going through the deactivating website of the Network Advertising Initiative (http://www.networkadvertising.org/choices/). Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). Further information about user-based advertising and opt-out-possibilities can be found here http://www.youronlinechoices.com/de/.

Google Analytics

We use Google Analytics, an online analysing service by Google, in order to optimally adapt out website to your interests. Google Analytics employs so-called ‘cookies’ (see section ‘cookies’) which are saved on your computer and which allow an analysis of your website usage. The information about your website usage that is generated this way is transferred to a server owned by Google in the USA and is processed there.

In case the anonymisation of the IP address on our website is activated, your IP address will then be abbreviated by Google within the member states of the European Union or in other contracting states of the European Economic Area Agreement. In exceptional cases the full IP address will be transferred to a server owned by Google in the USA and will then be shortened. Acting on our instructions Google uses this information to analyse your website usage, to compile reports about the website activities and to render further services regarding the website and internet usage.

The IP address transferred in the context of Google Analytics from your browser will not be merged with other Google data.

This website employs Google Analytics with the enhancement ‘_anonymizeIp()’. This way IP addresses are only processed further in abbreviated form to prevent them from being directly linked to a particular individual. If the data collected about you is personally identifiable, it will be excluded immediately and deleted.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics allow us to improve our offer online and to make it more interesting for you as a user. With regard to the exceptional case for when personal data is transferred to USA, Google has submitted to the EU-US Privacy shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for the processing by Google Analytics is Art. 6 (1) sentence 1 lit. f) GDPR. Cookies set by Google Analytics will be deleted after fourteen months at the latest.

You have the right to object. You can prevent the storage of cookies by adjusting your browser setting accordingly. In this case, we hereby notify you that not all website functions can be used to the full extent. Your right to object exists on grounds relating to your particular situation. Unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR). Moreover, you can prevent Google from collecting and processing your personal data (incl. your IP address), which is produced by cookies and your website visits, by downloading and installing the following browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.

More information about the third party ‘Google’ can be found here:
http://www.google.com/analytics/terms/de.html,
http://www.google.com/intl/de/analytics/learn/privacy.html,
http://www.google.de/intl/de/policies/privacy
.

Copyright © by Spirit Legal LLP

loading