Privacy notice for https://www.biggesee-listersee.com
1. Who is responsible and how do I contact the data protection supervisors?
Zweckverband Tourismusverband Biggesee-Listersee, (Joint body of the Biggesee-Listersee Tourist Office,) Schüldernhof 17, 57439 Attendorn, firstname.lastname@example.org
You have the following rights with regard to your personal data:
You may also complain about us to a data protection supervisory authority pursuant to Art 77 GDPR.
If you have given us consent, you may revoke this at any time without affecting the legality of what has been processed until this revocation occurs.
III. For what purposes and on what legal bases do we process personal data?
Visiting our website
For a visit to our website solely for information purposes, thus if you do not wish to register or transmit information to us in any other way, we only collect the personal data that your browser transmits to us. This is:
–Your IP address
–Date and time of request
–Content of request (specific page)
–Access status/HTTP status code
–Website from which request originates (“Referrer“)
–Operating system and its interface
–Language and version of browser software.
We also store this data, incl. the IP address in log files.
This data is required by us for technical reasons to notify our website, to guarantee its stability and security and to optimise our service.
The legal basis for this is Art. 6 Section 1 lit. f GDPR, whereby our justified interest is derived from the above-mentioned purposes.
We delete this data within seven days. We only store personal data for longer periods after it has been deleted or anonymised. IP addresses can be anonymised with the appropriate abbreviation.
On our website we use transient and persistent cookies. Transient cookies are automatically deleted when you close the browser. These specifically include session cookies. These store a “session ID” which is used to allocate various requests from your browser to the joint session. In this way we can recognise your computer again when you make a return visit to our website. Session cookies are deleted when you log out or close the browser. Persistent cookies are automatically deleted after a predetermined time which is different according to cookie. You may delete the cookies in security settings of your browser at any time.
You may configure your browser settings in accordance with your wishes and e.g. reject third party cookies or all cookies. Note that in this event you may not be able to use all the functions of the website.
If you use our contact form, we use the data transmitted by you for which only a valid email address is required and other information is voluntary, to respond to your request. Your information may be stored in a Customer Relationship Management System (CRM System) or comparable software.
Data for the purposes of contacting us is processed on the basis of Art. 6 Section1 lit. b GDPR, in so far as your request concerns the fulfilment of contractual obligations or the initiation of a contract. In other cases, the legal basis can be found in Art. 6 Abs. 1 lit. f GDPR, whereby our justified interest is derived from the above-mentioned purposes.
The personal data collected by us for the purposes of the contact form is automatically deleted after your request has been dealt with, if we are not legally obligated to retain it or we do not require the data to fulfil the contract. In addition, you can object to the processing at any time, if the processing takes place on the basis of a legitimate interest.
If you contact us using the email addresses specified by us, we store the personal data transmitted by you to respond to your request. Your information may be stored in a Customer Relationship Management System (CRM System) or comparable software.
The legal basis for this is Art. 6 Section 1 lit. f GDPR, whereby our justified interest is derived from the above-mentioned purposes. If the contact is for the purposes of concluding a contract or the contact is within the context of an existing contractual relationship, the legal basis is Art. 6 Section 1 lit. b GDPR.
The data is deleted when the request has been dealt with, if we are not legally obligated to retain it or we do not require the data for fulfilment of the contract. You may also object to processing of the data at any time, if this processing derives from a justified interest.
Matomo (formerly Piwik)
We use the web analysis service Matomo to analyse use of our website and to put in place regular improvements. Using the statistical information acquired we can improve our service and make it more attractive to you, the users. Thus, cookies are stored on your system. The information collected in this way is only stored on our servers in Germany / a member state of the European Union. No information is passed on to third parties.
Matomo is set up in such a way that the IP addresses are not stored in their entirety but abbreviated to the last two bytes, and thus it is no longer possible to assign the abbreviated IP address to the calling system.
The legal basis for the use of Matomo is Art. 6 Section 1 lit. f GDPR, whereby our justified interest is derived from the above-mentioned purposes.
Data is deleted when it is no longer required for our purposes, i.e. after 12 months.
You can delete the cookies in the browser settings at any time. You can also generally prevent the use of all cookies.
We also offer the option of an opt-out of the analysis process. For this you must follow the following link. In this way, another cookie is installed on your system which signals to Matomo that your data should not be stored. If you delete your cookies in the meantime, you must also reset the opt-out cookie.
You can obtain more detailed information from https://matomo.org/docs/privacy/
We currently use the following social media plug-ins: Facebook. Thus, we use the “two click solution” or a technically similar device. This means that when you visit our page, initially no personal data is forwarded to the provider of the plug-ins. You can identify the plug-in provider with the marking on the box using its initial letters or the logo. We offer you the option of communicating directly with the plug-in provider using the button. The plug-in provider only receives the information that you have accessed the relevant website of our online service if you click on the marked field and thus activate it. The data collected when you visit our website is also transmitted. In the case of Facebook, according to the information of the relevant providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in personal data from you is transmitted to the respective plug-in provider and stored there (for US/American providers in the USA). As the plug-in provider specifically collects data using cookies, we recommend that you delete all cookies from the greyed out box via the safety settings of your browser before clicking.
We do not have any influence over the data collected and data processing activities nor is the full scope of data collection, the purposes of processing or the retention periods know to us. We also have no information on deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as user profiles and uses it for the purposes of advertising, market research and/or to tailor its website to your needs. This kind of evaluation occurs specifically (even for users who are not logged in) to provided tailor-made advertising and to inform other social network users of your activities on our website. You have the right to object to the formation of these user profiles and must contact the respective plug-in provider to do so. Using these plug-ins we offer you the option of interacting with the social networks and other users so that we can improve our service and make it more attractive to you as user.
The legal basis for the use of plug-ins is Art. 6 Section 1 lit. f GPDR. Our justified interest is for marketing purposes. In so far as you consent to a plug-in by clicking, the legal basis is Art. Section 1 lit. a GDPR.
Data is forwarded irrespective of whether you have an account with the plug-in provider and are logged in with it. If you are logged in to the plug-in provider, your data collected by us is allocated directly to your account with the plug-in provider. If you activate the button and e.g. link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you regularly log out after using a social network, however especially before activating the social media plug-in button, as you can avoid your data being allocated to your profile with the plug-in provider.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be obtained from the privacy notices of this provider below. You will also find information there on your rights in this regard and setting options to protect your privacy.
Addresses of the respective plug-in providers and URL of the data protection notices:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php;
Further information on data collection: http://www.facebook.com/help/186325668085084,
Facebook is subject to the EU-US-Privacy-Shield: https://www.privacyshield.gov/EU-US-Framework.
We have integrated YouTube videos into our online service which are stored at http://www.youtube.com, and can be played directly from our website. These are all integrated in the “enhanced data protection mode”, i.e. no data is transferred to YouTube via you as user, if you do not play the videos. Only if you play the videos will the data specified in the following paragraph be transferred. We have no influence on this data transfer.
When you visit the website, YouTube receives the information that you have selected the relevant page of our website. The data collected when you visit our website is then transmitted. This occurs irrespective of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data is directly allocated to your account. If you do not wish it to be allocated to your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research and/or to tailor its website to your needs. This kind of assessment occurs specifically (even for users who are not logged in) to provided tailor-made advertising and to inform other users of the social network of your activities on our website. You have the right to object to the formation of these user profiles and must contact YouTube to do so.
The legal basis for the integration of YouTube videos is Art. 6 Section 1 lit. f GPDR. Our justified interest is for marketing purposes. In so far as you consent to the video by clicking, the legal basis is Art. Section 1 lit. a GDPR.
On this website we use the Google Maps service. Thus, we can directly display interactive maps for you in the website to enable you to easily use the map function
When you visit the website, Google receives the information that you have selected the relevant page of our website. The data collected when you visit our website is then transmitted. This occurs irrespective of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data is directly allocated to your account. If you do not wish it to be allocated to your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses it for the purposes of advertising, market research and/or to tailor its website to your needs. This kind of assessment occurs specifically (even for users who are not logged in) to provided tailor-made advertising and to inform other users of the social network of your activities on our website. You have the right to object to the formation of these user profiles and must contact Google to do so.
You can obtain further information on the purpose and scope of data collection and its processing by the plug-in provider in the provider’s privacy notices. You can also obtain further information on your rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
The legal basis for the integration of Google Maps is Art. 6 Section 1 lit. f GPDR. Our justified interest is for marketing purposes.
The IP address transmitted by Google Analytics from your browser is not merged with other data from Google.
You can prevent storage of cookies by a relevant setting of your browser software. However, note that in this event, you will not be able to use all functions of this website fully. Moreover, you can prevent the collection of data generated by the cookie and related to your use of the website by Google (incl. your IP address) and processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “anonymizeIp()“. Thus, IP addresses are further processed in an abbreviated form, and any link to a particular person is excluded. If any data collected about you is personal, this is immediately excluded and the personal data is immediately deleted.
We use Google Analytics to analyse and regularly improve use of our website. With the statistics acquired we can improve our service and make it more user-friendly for you. In exceptional cases, in which personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for use of Google Analytics is Art. 6 Section 1 lit. f GDPR. Our justified interest is for optimisation and marketing purposes, for which we use the results of Google Analytics. If you have consented to use, the legal basis is Art. 6 Section 1 lit. a GDPR.
Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: http://www.google.com/analytics/terms/de.html,
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html
and the privacy notice: http://www.google.de/intl/de/policies/privacy.
Google Web Fonts
This site uses web fonts for uniform presentation of fonts which are provided by Google. When a page is accessed, your browser loads the required web fonts in its browser cache to display text and fonts correctly.
In order to do so, the browser you use must connect with the Google servers. In this way, Google obtains the information that our website was accessed by your IP address. Google web fonts are used in the interests of a uniform and visually attractive presentation of our online services. This is a justified interest pursuant to the legal basis of Art. 6 Section 1 lit. f GDPR.
If your browser does not support web fonts, a default font is used by your computer. Further information on Google Web Fonts can be found at https://developers.googl
On this website we use a plug-in from the web analysis service New Relic. This enables us to collect statistical evaluations on the speed of the website. This service is operated by New Relic Inc., 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA (“New Relic”).
When a user accesses a website from this service, which contains this kind of plug-in, their browser makes a direct link with the servers of New Relic. Thus, the provider has no influence on the scope of data collected by New Relic using this plug-in and so informs users in accordance with its level of knowledge:
By integrating the plug-in, New Relic obtains the information that a user has accessed the relevant page of the service. If the user is logged in to New Relic, New Relic can allocate the visit to their account with New Relic. If a user is not a member of New Relic, it is nevertheless possible for New Relic to find out and store their IP address.
The purpose and scope of data collection and further processing and use of the data by New Relic and the relevant options for rights and settings for protection of the privacy of users, can be found in New Relic’s data protection notices: https://newrelic.com/privacy.
If a user is a member of New Relic and does not wish New Relic to collect data about them using this service and to link this with their member data stored with New Relic, they must log out before visiting New Relic’s website
Job applicant database
If you make a job application to us, we process the data transmitted to us to fulfil our (pre)contractual obligations within the context of the application process. If your application is successful, we continue to process the data for the purposes of establishing an employment relationship.
The legal bases for this are Art. 6 Section 1 lit. b GDPR und § 26 BDSG (German Data Protection Act). If you willing transmit to us special categories of personal data such as, e.g. data on health or religion, the legal basis is, in addition, Art. 9 Section 2 lit. b GDPR.
If your application is unsuccessful, we delete your data within six months. Your data is stored until then to respond to any queries regarding the application process and to comply with the obligations of proof pursuant to the German Equal Treatment Act (AGG). If you withdraw your application, we delete your data immediately.
To protect the security of your data on transmission, we use encryption processes corresponding to state-of-the-art technology (e.g. SSL) via HTTPS.
Data transmission on concluding a contract for reservations, online shops, merchants and dispatch of goods
We only transmit personal data to third parties, when it is required within the context of processing a contract, to companies entrusted with the supply of goods or credit institutions tasked with payment processing. Data is not further transmitted or only if you have specifically consented to transmission. We do not forward your data to third parties without your specific consent, for example, for marketing purposes.
The legal basis for data processing is Art. 6 Section 1 lit. b GDPR which permits processing of data to fulfil a contract or (pre)contractual measures.