data protection

Privacy policy for https://www.biggesee-listersee.com

Responsible

Zweckverband Tourismusverband Biggesee-Listersee
Schüldernhof 17
57439 Attendorn
datenschutz@bigge-listersee.de

Data protection officer

You can reach our data protection officer, JURANDO GmbH(https://www.jurando.de/), Dr. Dennis Werner, at datenschutz@bigge-listersee.de or by Post at our address with the addition "Data Protection Officer".

Visiting our website

When you visit our website for information purposes only, i.e. if you do not provide us with any other information, we only process the personal data that your browser transmits to us. These are

  • IP address of your system,
  • Date and time (incl. time zone) of your request,
  • Type, content and protocol version of your request (specific page request),
  • Access status (HTTP status code) of our server,
  • Size of our server response in bytes,
  • Website from which the request comes (so-called "referrer"),
  • your user agent (type, version, operating system used) and
  • the domain you accessed.

We also store this data in log files.
The aforementioned data is technically necessary for us to display our website, to ensure stability and security and to optimize our offer.
The legal basis is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest arises from the above-mentioned purposes. We delete this data after seven days at the latest. Any further storage only takes place if the personal data has been anonymized; in the case of IP addresses, for example, this is done by shortening them in accordance with data protection regulations.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Cookies

Cookies are small text files that are stored on your system and through which certain information flows to us. When you visit our website, we draw your attention to the use of cookies by means of a cookie notice that refers to this privacy policy. You can also consent to the use of cookies there.

The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest in the use of technically necessary cookies is to be able to offer you a functional and user-friendly website. The legal basis for cookies that are not technically necessary is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which may also relate to the transfer to third countries. You can delete cookies at any time via your browser settings.

Google Analytics

This website uses Google Analytics, a web analysis service that uses cookies (text files that are stored on your computer) to enable us to analyze your use of the website and to continuously improve our offer and make it more interesting.

If IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to a third country. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person.

If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https: //tools.google.com/dlpage/gaoptout?hl=de.

You can also click on Deactivate Google Analytics to set a so-called Analytics opt-out cookie, which prevents Google Analytics from collecting data when you use this website in the future.

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. a GDPR. A transfer to the USA is possible; Google LLC is certified according to the EU-U.S. Data Privacy Framework. Further information can be found at https://policies.google.com/privacy?hl=de.

Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool allows us to manage and integrate additional tracking and marketing services on our website. Your IP address is also processed in the process. The use is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. The storage period depends on the integrated services and ends at the latest when you withdraw your consent. A transfer to the USA is possible; Google LLC is certified according to the EU-U.S. Data Privacy Framework. Further information can be found at https://policies.google.com/privacy?hl=de.

Google Maps

This website uses Google Maps, a service provided by Google Ireland Limited, to display interactive maps and to enable convenient use of the map function.

When you access a page with an integrated map, at least your IP address and other technical information (e.g. browser data) is transmitted to Google. If you are logged in to Google, this information can be assigned to your account.

The legal basis for the integration of Google Maps is your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time via the cookie settings. Transmission to the USA is possible; Google LLC is certified under the EU-U.S. Data Privacy Framework.

Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

Google reCAPTCHA

We use Google reCAPTCHA from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to protect our forms from automated input (e.g. spam or bots). Technical information about your user behavior (e.g. IP address, mouse movements) is transmitted to Google.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG, given via the cookie banner.

Data may be transmitted to servers of Google LLC in the USA. Google is certified in accordance with the EU-US Data Privacy Framework, which guarantees an adequate level of data protection in accordance with Art. 45 GDPR.

Further information: https://policies.google.com/privacy

Matamo Analytics

We use the web analysis service Matomo on our website, an open source software for the statistical analysis of user behavior. Matomo is used in a data protection-friendly manner so that no personal data is processed. The IP address of visitors is anonymized, no cookies are set and the data is not passed on to third parties. The evaluation serves exclusively to improve and optimize our online offering.

The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the anonymized analysis of website usage). The anonymized data is processed internally and deleted as soon as it is no longer required for statistical purposes.

Leaflet

We use the open source service Leaflet to display interactive maps. Data (e.g. IP address, device information) may be transmitted to external servers, in particular from OpenStreetMap, to provide the map content. This serves the user-friendly presentation of geographical information.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG, which you can give via the cookie banner.

You can find more information about OpenStreetMap at: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

YouTube

Videos are embedded on our website via YouTube of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies are set and data such as IP address and device information are processed. The processing takes place exclusively with your consent in accordance with Art. 6 para. 1 lit. a GDPR. The storage period varies depending on the cookie and ends at the latest when you withdraw your consent. Data may be transferred to the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy?hl=de.

Contacting us via the contact form and by email

If you send us inquiries via the contact form or by email, the information you provide will be processed exclusively for the purpose of processing and responding to your inquiry.

This includes in particular the contact details you provide (e.g. name, e-mail address, telephone number and message text). The data is transmitted via an encrypted connection (SSL).

In order to process the inquiries properly, they may be forwarded to the responsible colleagues at the tourist information offices in the Hanseatic towns of Attendorn, Meinerzhagen, Olpe, Drolshagen or Wenden if this is necessary to answer them. No other data will be passed on to third parties.

The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR (processing for the implementation of pre-contractual measures or for the fulfillment of a contract).

The data will be deleted as soon as your request has been finally processed and there are no legal obligations to retain the data.

Online booking

To provide and process our online bookings, we use the booking system, which is technically provided by my.IRS GmbH, Dornierstraße 4, 82178 Puchheim, and operated by Holidu GmbH, Riesstraße 24, 80992 Munich. Both companies support us in the administration and processing of booking requests and act as processors in accordance with Art. 28 GDPR. Corresponding contracts for order processing have been concluded with both service providers, which guarantee an appropriate level of data protection.

If you make a booking or submit an inquiry via our website, the data you enter (e.g. name, address, contact details, period of stay, desired accommodation) will be processed to process the booking order.

Your data will be transmitted to Holidu GmbH and my.IRS GmbH in order to process the booking technically and organizationally. In addition, your data will be forwarded to the respective booked or requested accommodation provider if this is necessary for processing. The service providers are prohibited from using or passing on your data for other purposes.

The processing takes place exclusively for the purpose of carrying out and managing your booking.

The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment and pre-contractual measures).

Further information on data protection can be found at

Application procedure

If you apply to us by email, we will process your personal data to carry out the application process. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract initiation).

Your data will only be processed internally and only passed on to the persons responsible for the application process, in particular to the HR department and the respective requesting specialist department. Your data will not be passed on to external bodies.

If you are not hired, we will store your data for up to six months after completion of the application process in order to be able to defend ourselves against possible legal claims.

If you give your express consent, we may also include your data in our applicant pool for a longer period in order to consider you for future vacancies. In this case, the processing is based on Art. 6 para. 1 lit. a GDPR (consent). You can withdraw your consent at any time with effect for the future.

Social media

Our website contains links to various social media platforms. You can usually recognize these links by the corresponding symbols or buttons (Facebook and Instagram).

When you click on such a link, you leave our website and are forwarded directly to the respective platform. Only there does data processing take place by the respective provider. We have no influence on the type and scope of data processing by the third-party providers.

The links serve exclusively to redirect you to our presence or to simplify the possibility of sharing content. Data is therefore only transferred if you actively click on the link.

  • Facebook/Instagram, provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Possible transmission to Meta Platforms Inc, 1601 Willow Road, Menlo Park, CA 94025, USA. Meta is certified in accordance with the EU-U.S. Data Privacy Framework.

The legal basis for the provision of the links is our consent in accordance with Art. 6 para. 1 lit. a GDPR, which you give voluntarily by clicking on the respective symbol.

External links

Our website contains links to external websites, in particular to accommodation providers, partners or tourist offers. When you click on such a link, you leave our website. The respective provider is solely responsible for the processing of personal data on the linked pages. We have no influence on their content or data protection practices.

Recipients and processors

Your personal data will only be made accessible within our company to those departments that need it to fulfill their respective tasks. These include, in particular, the relevant specialist departments and, in the application process, the HR department.

In addition, we use carefully selected external service providers as processors in accordance with Art. 28 GDPR, such as IT service providers, booking or payment service providers.

In the context of bookings, orders or contract conclusions, personal data may be passed on to contractual partners, dealers or shipping service providers if this is necessary to process the contract.

Contracts for order processing are in place with all order processors, which guarantee an appropriate level of data protection.

Your data will only be passed on to other recipients if there is a legal obligation to do so or if you have expressly consented to this.

Data transfer to third countries

Personal data will only be transferred to countries outside the EU or the EEA if there is a legal basis for this or if you have given your consent.

If data is transferred to the USA, this is done, for certified providers, on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR).

For non-certified providers, the standard contractual clauses of the EU Commission (Art. 46 para. 2 lit. c GDPR) apply as suitable guarantees.

Storage period

We only store your personal data for as long as is necessary for the respective purposes for which we have collected it or as long as we are legally obliged to store it.

Rights of the data subject

As a data subject, you have the following rights under the applicable data protection laws, in particular the GDPR

  • Right to information (Art. 15 GDPR): You have the right to request information about whether and which personal data we process about you. This includes information about the purposes of processing, the categories of personal data, the recipients, the planned storage period and your other rights.
  • Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete personal data concerning you rectified without undue delay.
  • Right to erasure (Art. 17 GDPR): You may request the erasure of your personal data, provided that there are no statutory retention obligations or other overriding legal grounds to the contrary.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data, e.g. if you dispute the accuracy of the data or have lodged an objection.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
  • Right to object (Art. 21 GDPR): You can object to the processing of your personal data at any time for reasons arising from your particular situation, provided that this is done on the basis of Art. 6 para. 1 lit. e or f GDPR. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
  • Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw consent once given at any time with effect for the future without affecting the lawfulness of processing up to the point of withdrawal.
  • In addition, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) if you believe that the processing of your personal data violates applicable data protection law. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia:

LDI NRW

Kavalleriestraße 2-4

40213 Düsseldorf

Telephone: 0211 / 38424-0

E-mail: poststelle@ldi.nrw.de

Web: https://www.ldi.nrw.de

However, you can also contact any other data protection supervisory authority.

Status of this privacy policy

This data protection declaration is currently valid and is dated October 2025. We reserve the right to adapt this declaration if new services are used, processing processes change or legal requirements are adapted.

Data protection notice for the use of my.toubiz #elements

We use the plugin mein.toubiz #elements from the provider land in sicht AG on our website. This plugin uses the open source web analysis service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before it is saved. Matomo cookies remain on your end device until you delete them. The storage of Matomo cookies and the use of this analysis tool are based on Article 6 Paragraph 1 lit. f GDPR. The website operator has a legitimate interest in the anonymous analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent was requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Article 6 Paragraph 1 lit. the consent can be revoked at any time. The information generated by the cookie about the use of this website will not be passed on to third parties. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from saving usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit this website again.

service provider: land in sicht ag, Wiesentalstr. 5, 79115 Freiburg, www.land-in-sicht.de

Please note that after activation, data will be transmitted to the respective provider.

Please note that after activation, data will be transmitted to the respective provider.