Data protection
Data protection information
1. We are responsible for your data
As a visitor to www.saarschleifenland.de, you not only expect tourist highlights but also a high level of quality when it comes to the processing of your personal data. We are responsible for handling your data, which we process according to your wishes and the provisions of German and EU data protection laws. We will only process your personal data if this is permitted by law or if you have given your prior consent. We, that is Saarschleifenland Tourismus GmbH, Torstraße 45, 66663 Merzig (email: tourismus@saarschleifenland.de) and our service providers, who process your data on our behalf for the purposes stated below (hereinafter: ‘we’). Our service providers include IT service providers, file and internet hosting services, printers, lettershops, payment and web analytics service providers. Our service providers are prohibited from processing your data for any purpose other than for the specific order. Our service providers who enable the display of the website and its functions also include Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States, (‘Amazon’) and Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Amazon and Google have submitted to the EU-Privacy-Shield, which, according to the EU Commission, provides sufficient guarantee of an adequate level of data protection for the processing of data in the USA (certificate available at:https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4 or https://www.privacyshield.gov/participant? id=a2zt000000001L5AAI). We attach great importance to the transparent and lawful processing of your data. The following information is intended to help you understand at all times which personal data is collected during your visit to our website and when you use our services and offers, and how we process your data.
2. How secure is your data?
We take technical and organisational security precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. The measures taken are designed to ensure the confidentiality, integrity, availability and resilience of the systems and services related to the processing of your data over the long term and to restore them quickly in the event of a physical or technical incident. This also includes the encryption of your data. All information that you enter online is encrypted using SSL technology (Secure Socket Layers SSL, RSA 1024 Bit, RC4 -256 Bit) and only then transmitted to our servers. Our data processing and security measures are continuously improved in line with technological developments.
3. Our data protection officer: If you have a question about data protection or data security, you can contact our data protection officer by email at p.klein@merzig-wadern.de or by post at Saarschleifenland Tourismus GmbH, Peter Klein, Torstraße 45, 66663 Merzig.
4. What personal data is processed? Personal data is any information relating to an identified or identifiable person. This includes, for example:
· Address data: name, postal address, email address
· Telecommunications data: landline, mobile phone number, email address
· Booking and purchase data: requested, booked or ordered service, category,
· period or quantity, prices, service providers, payment method, data on any fellow travellers
· Financial data: bank account data, credit card data, Paypal transaction data
5. What are mandatory fields? If certain data fields are marked as mandatory or mandatory fields and marked with an asterisk ( * ), the provision of this data is required by law or contract, or for the conclusion of the contract, the desired service or the stated purpose. A provision is at your discretion. If you do not provide the data, it may not be possible to fulfil the contract or provide the requested service or achieve the stated purpose.
6. Why do we process your data?a. Contact requests: We process your information in order to answer your contact requests (Art. 6 (1) (b) and (f) GDPR), either directly, through engaged service providers or by transmitting it to the respective service provider (accommodation, leisure provider, etc.). The communication of address data or telecommunications data is necessary in order to process your request and to be able to answer it via the desired means of communication. We and, where applicable, the respective service provider store the information from your contact request after answering the request, usually for a further six months in case of further enquiries, unless they are to be stored for a longer period due to legal storage obligations (see, for example, the storage period for purchases, bookings and contract-related requests below b.).b. Bookings, purchases: When you make a booking or purchase something or send us other contract-related enquiries, we initially process your personal data (address data, telecommunications data, booking and purchase data, possibly financial data) for the purpose of processing and handling the booking, order or other contract-related enquiry and, if necessary, for billing and payment processing (Art. 6 (1) (b) GDPR). When you book or purchase third-party services, we will forward your information to the respective service provider as named in the offer, who will process the information for the same purposes. Insofar as data is marked as mandatory, it is required for the processing or execution of the corresponding contract or for billing. We or the service providers store the data relevant to your booking, order or other contract-related request and the associated documents (e.g. commercial letters, invoices) are stored by us or the service providers in accordance with the legal requirements after the contract has been concluded in accordance with the statutory provisions for six years (§ 257 para. 4 HGB, Art. 6 para. 1 c DSGVO) or ten years (§ 147 para. 3 AO, Art. 6 para. 1 c DSGVO). AdvertisingPostal advertising and customer analysesWe process your personal data from bookings and purchases (address data, booking/purchase data) for postal advertising with tourist information and offers from the region; in order to send you suitable information, we also carry out internal marketing and customer analyses (Art. 6 para. 1 f DSGVO). E-mail newsletter: With your consent, we will send you our newsletter by e-mail with tourist information from the region (Section 7 (2) no. 3 of the German Unfair Competition Act (UWG), Art. 6 (1) a GDPR). Of course, you can revoke your consent at any time with effect for the future. To obtain your consent to our e-mail newsletter, we use the so-called double opt-in procedure online to avoid sending our newsletter to e-mail addresses of people who have not requested it. We will send you a confirmation request by e-mail and will only start sending our newsletter after your confirmation. In doing so, your IP address is also recorded and stored for documentation purposes (Art. 7 para. 1, Art. 6 para. 1 c GDPR). Storage period for advertising: We store the data collected for advertising purposes for as long as the advertising purpose persists or until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes (see section 7). d. Display of web content and functions: We also process data that arises from the use of our website, of course for the display of the desired content and for the execution of the functions you have selected (Art. 6 (1) b and f GDPR). e. Ensuring system security Finally, every time a user accesses a page on our website, data about this process is temporarily stored and processed in a log file (Art. 6 (1) f GDPR). This data includes:
Category or type, name and URL of the accessed file, Date and time of access, Amount of data transferred, Report on whether the access was successful, The access method/function requested by the requesting computer, A description of the type of web browser used with further system details, IP address, Website from which access occurs. The temporary storage of this so-called server log data is necessary for technical reasons to provide the service and thereafter to ensure system security. The data will be anonymised by shortening the IP address after seven days at the latest, provided that and to the extent that no abnormalities indicate possible system errors, an attempt at unauthorised access or other hacker attacks and a longer storage period is necessary for further clarification, technical elimination of the problems and/or, if necessary, legal prosecution. Otherwise, this data is analysed in anonymised form for statistical purposes.f. Change of purposeShould we change the purposes of the processing over time, we will inform you in advance by updating this data protection information.g. Extension of storage periods: The specified storage periods may be extended accordingly if, in individual cases, in particular if the data is processed for different purposes, a longer legal or contractual retention period exists. 7. Right of objection and revocation at any time: You have the right to object to the processing of your data at any time for reasons arising from your particular situation, provided that the legal requirements are met. Even if you object to the processing of your data for advertising purposes or wish to revoke a given consent, a short message to tourismus@saarschleifenland.de or to Saarschleifenland Tourismus GmbH, Torstraße 45, 66663 Merzig is sufficient at any time. You can easily unsubscribe from the e-mail newsletter by using the unsubscribe link in the newsletter. Your data will then no longer be processed for the corresponding advertising purposes. The lawfulness of the processing carried out up to the point of objection or revocation remains unaffected by this. After your objection to the processing of your personal data for advertising purposes or the revocation of your consent, we are obliged under data protection law, in accordance with the requirements of the German data protection supervisory authorities, to include the necessary data (name, address, email address) in our internal advertising blacklist and to store it permanently – only for this purpose – (to block it) and to use it to compare with our future advertising files (Art. 21 (3), Art. 17 (3) b, Art. 6 (1) c, f GDPR). This ensures that your objection to advertising or the revocation of your consent is permanently observed.
8. Cookies and trackinga. Cookies‘Cookies’ are small files that are transmitted to your end device (e.g. computer, smartphone) via your web browser or other programs. These are stored locally on your end device and kept ready for later retrieval. We also use cookies from our service providers on our website
to enable the necessary technical functions, e.g. the booking process (Art. 6 para. 1 b, f GDPR) to evaluate visits to our website (web tracking) so that we can optimally adapt our website to your needs and make it more user-friendly (Art. 6 para. 1 a GDPR) and to recognise your consent or rejection of the setting of cookies (Art. 6 para. 1 f GDPR).b. Refusing/deleting cookies: Without your consent (see d.), only technically necessary cookies will be set. You can set your web browser to notify you when cookies are set or to generally refuse cookies or restrict their use. However, if you disable or restrict the use of cookies through your browser settings, you will no longer be able to use various functions on our website. You can use your web browser to delete stored cookies at any time, including automatically. The following links will take you to information about this option for the most commonly used browsers: mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computerGoogle Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647Safari: https://support.apple.com/kb/ph21411?locale=de_DEOpera: http://help. opera.com/Linux/12.10/de/cookies.html. If you have not made or do not make any different settings, cookies that enable and ensure the necessary technical functions remain on your device until you close the browser. Other cookies may remain on your device for longer (see c. below). c. Tracking with Google AnalyticsThis website uses Google Analytics, a web analysis service provided by our service provider Google Inc., USA (Art. 6 (1) (a) GDPR), with your consent, which can be revoked at any time with future effect (see d. below). Google uses cookies to enable an analysis of your use of the website. The information generated by the cookies is usually transferred to a Google server in the USA and stored there. Due to the activation of IP anonymisation on our website, your IP address, which is also transmitted, will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand and thus anonymised. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Google cookies remain stored on your device for 90 days. You can prevent the data collected by the cookie and related to your use of the website (including your abbreviated IP address) from being processed by Google by not giving your consent (see d.) or by downloading and installing the browser add-on available at the following link https://tools.google.com/dlpage/gaoptout.
Deactivate Google Analytics
d. Consent: By clicking on the banner on our website, you declare your revocable consent (Art. 6 para. 1 a GDPR) that we may use cookies and pseudonymous analysis techniques on our website and that of our service providers in order to evaluate visits to our website so that we can optimise our website to your needs and make it more user-friendly. To determine whether you have given your consent, a corresponding consent cookie is placed on your computer. You can revoke your consent by clicking here. Please note that you must not delete your cookies so that we can permanently observe your revocation. 9. How can you exercise your data protection rights? If you have any questions regarding the processing of your personal data by us, we will of course be happy to provide you with information about the data concerning you (Art. 15 GDPR). In addition, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and objection (Art. 21 GDPR) if the legal requirements are met. You also have the right to data portability (Art. 20 GDPR). In all these cases, please contact our data protection officer at the communication addresses given. Finally, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR, § 19 BDSG). 10. Amendments: From time to time it is necessary to amend the content of this data protection information. We therefore reserve the right to amend this at any time in the future. We will also publish the amended version of the data protection notice here. Therefore, when you visit us again, you should read the data protection notice again. As of: 25 May 2018